CVE-2025-40941: Infoleak
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SIMATIC CN 4100to a version that resolves this vulnerability.Fixed in V4.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40941?
CVE-2025-40941 is considered a moderate severity vulnerability that exposes server information.
How do I fix CVE-2025-40941?
To mitigate CVE-2025-40941, upgrade SIMATIC CN 4100 to version 4.0.1 or later.
What devices are affected by CVE-2025-40941?
CVE-2025-40941 affects all versions of SIMATIC CN 4100 that are earlier than version 4.0.1.
What are the risks associated with CVE-2025-40941?
The risks of CVE-2025-40941 include potential targeted attacks due to exposed server information.
How does CVE-2025-40941 allow attackers access?
CVE-2025-40941 allows attackers with network access to gain sensitive server information, increasing attack vectors.