CVE-2025-40937
published 2025-12-09CVE-2025-40937: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST…
PriorityP263high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.51%
40.1th percentile
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments.
This could allow an authenticated attacker to execute arbitrary code with limited privileges.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_cn_4100 | < V4.0.1 | V4.0.1 |
| siemens | simatic_cn_4100_firmware | < 4.0.1 | 4.0.1 |
Detection & IOCsextracted from sources · hover to see the quote
- →CVE-2025-40937 is a command injection (CWE-77) via improper input validation in the REST API of SIMATIC CN 4100; monitor for authenticated REST API requests containing unexpected or shell-special-character arguments targeting the device. ↗
- →Attack vector is network-based, requires low privileges, no user interaction; flag anomalous authenticated REST API calls to SIMATIC CN 4100 devices, especially those with injected command syntax in parameter values. ↗
- ·All versions of SIMATIC CN 4100 prior to V4.0.1 are vulnerable; the fix is to update to V4.0.1 or later. ↗
- ·The vulnerability requires an authenticated session to exploit; ensure REST API access is restricted to trusted, authenticated users and that network access to the device is protected. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.08.7HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC CN 4100
cisa_ics·2025-12-09·CVSS 8.3
[HIGH] Siemens SIMATIC CN 4100
ICS Advisory
##
Siemens SIMATIC CN 4100
Release DateDecember 09, 2025
Alert CodeICSA-26-015-12
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
The following versions of Siemens SIMATIC CN 4100 are affected:
- SIMATIC CN 4100 (CVE-2025-40937, CVE-2025-40938, CVE-2025-40939, CVE-2025-40940, CVE-2025-40941)
CVSS
Vendor
Equipment
Vulnerabilities
| v3 8.3
| Siemens
| Siemens SIMATIC CN 4100
| Improper Neutralization of Special Elements used in a Command ('Comma
GHSA
GHSA-f729-p9c9-fm58: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4
ghsa_unreviewed·2025-12-09
CVE-2025-40937 [HIGH] CWE-77 GHSA-f729-p9c9-fm58: A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly validate input parameters in its REST API, resulting in improper handling of unexpected arguments.
This could allow an authenticated attacker to execute arbitrary code with limited privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-12-09
Published