目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2025-40805— Siemens Industrial Edge Devices 安全漏洞

一分钟漏洞结论

影响对象
Siemens Industrial Edge Cloud Device (IECD)
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Siemens Industrial Edge Devices是德国西门子（Siemens）公司的一系列工业边缘设备，用于现场数据处理与智能控制。 Siemens Industrial Edge Devices存在安全漏洞，该漏洞源于特定API端点身份验证不当，可能绕过身份验证并冒充合法用户。

CVSS 10.0 · Critical EPSS 0.61% · P47

可能的 ATT&CK 技术 1 AI

T1078 · Valid Accounts

影响版本矩阵 108

厂商产品 版本范围状态
Siemens Industrial Edge Cloud Device (IECD) < V1.24.2 affected
Siemens Industrial Edge Device Kit - arm64 V1.10 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.11 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.12 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.13 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.14 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.15 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.16 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.17 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.18 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.19 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.20 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.21 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.22 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.23 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.24 < V1.24.2 affected
Siemens Industrial Edge Device Kit - arm64 V1.25 < V1.25.1 affected
Siemens Industrial Edge Device Kit - arm64 V1.5 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.6 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.7 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.8 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.9 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.10 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.11 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.12 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.13 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.14 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.15 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.16 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.17 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.18 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.19 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.20 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.21 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.22 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.23 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.24 < V1.24.2 affected
Siemens Industrial Edge Device Kit - x86-64 V1.25 < V1.25.1 affected
Siemens Industrial Edge Device Kit - x86-64 V1.5 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.6 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.7 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.8 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.9 < * affected
Siemens Industrial Edge Own Device (IEOD) < V1.24.2 affected
Siemens Industrial Edge Virtual Device (IEVD) < V1.24.2 affected
Siemens SCALANCE LPE9413 < V2.2 affected
Siemens SCALANCE LPE9433 < V2.2 affected
Siemens SIMATIC Automation Workstation 19" < V1.3 affected
Siemens SIMATIC Automation Workstation 24" < V1.3 affected
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel < V21 affected
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic < V21 affected
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design < V21 affected
Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral < V21 affected
Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit < V21 affected
Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio < V21 affected
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel < V21 affected
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic < V21 affected
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design < V21 affected
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design < V21 affected
Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit < V21 affected
Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio < V21 affected
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel < V21 affected
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic < V21 affected
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design < V21 affected
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design < V21 affected
Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit < V21 affected
Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio < V21 affected
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel < V21 affected
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic < V21 affected
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design < V21 affected
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design < V21 affected
Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit < V21 affected
Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) < V21 affected
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio < V21 affected
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) < V21 affected
Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic < V21 affected
Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design < V21 affected
Siemens SIMATIC HMI MTP2200 Unified Comfort Panel < V21 affected
Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design < V21 affected
Siemens SIMATIC HMI MTP700 Unified Comfort Panel < V21 affected
Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design < V21 affected
< V21 affected
Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design < V21 affected
Siemens SIMATIC IOT2050 < V1.25.1 affected
Siemens SIMATIC IPC BX-39A Industrial Edge Device < V3.1 affected
Siemens SIMATIC IPC BX-59A Industrial Edge Device < V3.1 affected
Siemens SIMATIC IPC127E Industrial Edge Device < V3.1 affected
Siemens SIMATIC IPC227E Industrial Edge Device < V3.1 affected
Siemens SIMATIC IPC227G Industrial Edge Device < V3.1 affected
Siemens SIMATIC IPC427E Industrial Edge Device < V3.1 affected
Siemens SIMATIC IPC847E Industrial Edge Device < V3.1 affected
Siemens SIPLUS HMI MTP1000 Unified Comfort < V21 affected
Siemens SIPLUS HMI MTP1200 Unified Comfort < V21 affected
Siemens SIPLUS HMI MTP700 Unified Comfort < V21 affected
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2025-40805 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
来源: CVE Program / CVE List V5
Vulnerability Title
Siemens Industrial Edge Devices 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Siemens Industrial Edge Devices是德国西门子（Siemens）公司的一系列工业边缘设备，用于现场数据处理与智能控制。 Siemens Industrial Edge Devices存在安全漏洞，该漏洞源于特定API端点身份验证不当，可能绕过身份验证并冒充合法用户。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

神龙十问 — AI 深度分析

十问解析：根本原因、利用方式、修复建议、紧迫性。摘要免费，完整版需登录。

查看摘要 完整分析（登录）

受影响产品

厂商 产品 影响版本 CPE 订阅
Siemens Industrial Edge Cloud Device (IECD) 0 ~ V1.24.2 -
Siemens Industrial Edge Device Kit - arm64 V1.10 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.11 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.12 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.13 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.14 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.15 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.16 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.17 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.18 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.19 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.20 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.21 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.22 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.23 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.24 0 ~ V1.24.2 -
Siemens Industrial Edge Device Kit - arm64 V1.25 0 ~ V1.25.1 -
Siemens Industrial Edge Device Kit - arm64 V1.5 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.6 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.7 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.8 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.9 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.10 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.11 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.12 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.13 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.14 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.15 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.16 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.17 0 ~ * -

二、漏洞 CVE-2025-40805 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-40805 的情报信息

请登录查看更多情报信息。

同批安全公告 · Siemens · 2026-01-13 · 共 3 条

CVE-2025-40942 8.8 HIGH siemens TeleControl Server Basic 安全漏洞
CVE-2025-40944 7.5 HIGH Siemens多款产品 资源管理错误漏洞

IV. Related Vulnerabilities

Same vendor: Siemens
Same weakness: CWE-639

V. Comments for CVE-2025-40805

暂无评论

发表评论