Siemens SIMATIC
Siemens SIMATIC S7-1500 and related devices contain a critical code injection vulnerability (CVE-2025-40943) in their web interface that allows attackers to execute arbitrary code by tricking users into importing specially crafted trace files. The vulnerability affects dozens of device models across multiple product lines with a CVSS score of 9.6. Siemens has released patches for some affected products and recommends updating to version 4.1.2 or later, with specific mitigation measures including disabling the webserver and restricting access to ports 80/443.
Summary
Siemens SIMATIC S7-1500 and related devices contain a critical code injection vulnerability (CVE-2025-40943) in their web interface that allows attackers to execute arbitrary code by tricking users into importing specially crafted trace files. The vulnerability affects dozens of device models across multiple product lines with a CVSS score of 9.6. Siemens has released patches for some affected products and recommends updating to version 4.1.2 or later, with specific mitigation measures including disabling the webserver and restricting access to ports 80/443.
Indicators of Compromise
- cve — CVE-2025-40943