CVE-2025-39204: Infoleak
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39204?
CVE-2025-39204 is classified as a high-severity vulnerability due to its potential for unauthorized information disclosure.
How do I fix CVE-2025-39204?
To fix CVE-2025-39204, you should update the MicroSCADA X SYS600 to the latest patched version provided by Siemens.
What type of information can be leaked by CVE-2025-39204?
CVE-2025-39204 may leak unauthorized data resulting from malformed filtering queries in the Web interface.
Is CVE-2025-39204 specific to certain versions of MicroSCADA X SYS600?
CVE-2025-39204 specifically affects the Web interface of the MicroSCADA X SYS600 product, regardless of version.
What is the impact of CVE-2025-39204 on users?
Users impacted by CVE-2025-39204 may accidentally receive sensitive information they are not authorized to access.