Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-40771

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIM

Description

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.4.24). Affected devices do not properly authenticate configuration connections. This could allow an unauthenticated remote attacker to access the configuration data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SIMATIC CP 1542SP-1

Default version status: unknown

  • 0 to < V2.4.24affected

Siemens SIMATIC CP 1542SP-1 IRC

Default version status: unknown

  • 0 to < V2.4.24affected

Siemens SIMATIC CP 1543SP-1

Default version status: unknown

  • 0 to < V2.4.24affected

Siemens SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL

Default version status: unknown

  • 0 to < V2.4.24affected

Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC

Default version status: unknown

  • 0 to < V2.4.24affected

Siemens SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL

Default version status: unknown

  • 0 to < V2.4.24affected

References