cbcvebase.
CVE-2025-40943
published 2026-03-10

CVE-2025-40943: Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user…

PriorityP352critical9.6CVSS 3.1
AVNACLPRNUIRSCCHIHAH
EPSS
0.46%
36.9th percentile
Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitized and malicious code could be executed in the clients browser session and trigger PLC operations via the webserver that the legitimate user is authorized to perform.

Affected

122 ranges· showing 25
VendorProductVersion rangeFixed in
siemenssimatic_drive_controller_cpu_1504d_tf< V3.1.6V3.1.6
siemenssimatic_drive_controller_cpu_1507d_tf< V3.1.6V3.1.6
siemenssimatic_et_200sp_cpu_1510sp-1_pn< V2.9.9V2.9.9
siemenssimatic_et_200sp_cpu_1510sp-1_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1510sp_f-1_pn< V2.9.9V2.9.9
siemenssimatic_et_200sp_cpu_1510sp_f-1_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1512sp-1_pn< V2.9.9V2.9.9
siemenssimatic_et_200sp_cpu_1512sp-1_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1512sp_f-1_pn< V2.9.9V2.9.9
siemenssimatic_et_200sp_cpu_1512sp_f-1_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1514sp-2_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1514sp_f-2_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1514spt-2_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_cpu_1514spt_f-2_pn< V4.1.2V4.1.2
siemenssimatic_et_200sp_open_controller_cpu_1515sp_pc< **
siemenssimatic_et_200sp_open_controller_cpu_1515sp_pc2_v2_cpus_windows_os< **
siemenssimatic_et_200sp_open_controller_cpu_1515sp_pc2_v3_cpus_industrial_os< **
siemenssimatic_et_200sp_open_controller_cpu_1515sp_pc2_v3_cpus_windows_os< **
siemenssimatic_et_200sp_open_controller_cpu_1515sp_pc3_v4_cpus< **
siemenssimatic_s7-1500_cpu_1511-1_pn< **
siemenssimatic_s7-1500_cpu_1511-1_pn< V2.9.9V2.9.9
siemenssimatic_s7-1500_cpu_1511-1_pn< V4.1.2V4.1.2
siemenssimatic_s7-1500_cpu_1511c-1_pn< V2.9.9V2.9.9
siemenssimatic_s7-1500_cpu_1511c-1_pn< V4.1.2V4.1.2
siemenssimatic_s7-1500_cpu_1511f-1_pn< V2.9.9V2.9.9

CVSS provenance

nvdv3.19.6CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
nvdv4.09.4CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.