VDB

ICSA-25-254-03

ICSA-25-254-03 PUBLISHED CVSS 6.300000190734863 MEDIUM

Record from circl · Published September 9, 2025

Siemens SINAMICS G220, SINAMICS S210, and SINAMICS S200 contains a privilege escalation vulnerability that could allow users to escalate their privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.

Risk scores

CVSS 3.1
6.300000190734863
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L

Affected products

VendorProductVersions
SINAMICS S200 V6.4
SINAMICS S210 V6.4
SINAMICS G220 V6.4

Timeline

  • Sep 9, 2025 CVE Published
  • Mar 12, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ICSA-25-254-03
vulnetix vdb fixes ICSA-25-254-03

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ICSA-25-254-03/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›