CVE-2025-40938

Risk Scores

Exploit Intelligence

• CIRCL seen: CVE-2025-40938 (circl-sighting)
• https://cert-portal.siemens.com/productcert/html/ssa-416652.html (circl)

Timeline

• Dec 9, 2025 CVE Published
• Dec 9, 2025 EPSS Score
• Dec 9, 2025 PoC Published
• Dec 13, 2025 EPSS Score
• Dec 17, 2025 EPSS Score
• Dec 22, 2025 EPSS Score
• Dec 26, 2025 EPSS Score
• Dec 30, 2025 EPSS Score
• Jan 3, 2026 EPSS Score
• Jan 7, 2026 EPSS Score
• Jan 12, 2026 EPSS Score
• Jan 16, 2026 EPSS Score

References

• https://cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1083/ advisory
• https://cert-portal.siemens.com/productcert/html/ssa-416652.html advisory
• https://cert-portal.siemens.com/productcert/html/ssa-915282.html advisory
• https://cert-portal.siemens.com/productcert/html/ssa-471761.html advisory