CVE-2025-40585 — Siemens / Energy Services

CVE-2025-40585

Siemens / Energy Services PUBLISHED

Description (CNA)

A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device.

Affected (CNA)

Vendor / product	Versions
Siemens / Energy Services	affected 0 before *

CWE

CWE-276

References

https://cert-portal.siemens.com/productcert/html/ssa-345750.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.