CVE-2025-40804 — Siemens / SIMATIC Virtualization as a Service (SIVaaS)

CVE-2025-40804

Siemens / SIMATIC Virtualization as a Service (SIVaaS) PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization.

Affected (CNA)

Vendor / product	Versions
Siemens / SIMATIC Virtualization as a Service (SIVaaS)	affected 0 before *

CWE

CWE-732

References

https://cert-portal.siemens.com/productcert/html/ssa-534283.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.