Threats Tagged 'cve-2025-40759'

CVE-2025-40759 is a high-severity deserialization vulnerability affecting multiple Siemens industrial automation software products, including SIMATIC S7-PLCSIM V17 and various versions of SIMATIC STEP 7, WinCC, SIMOCODE ES, SIMOTION SCOUT TIA, SINAMICS Startdrive, SIRIUS Safety ES, SIRIUS Soft Starter ES, and TIA Portal Cloud. The flaw arises from improper sanitization of stored security properties when parsing project files, leading to type confusion and enabling arbitrary code execution within the affected applications. Exploitation requires local access and user interaction but no privileges, making it a significant risk in environments where project files can be manipulated or imported from untrusted sources. The vulnerability impacts confidentiality, integrity, and availability of critical industrial control systems. No known exploits are currently reported in the wild. European organizations using Siemens automation software in manufacturing, energy, and infrastructure sectors are particularly at risk. Mitigation involves applying Siemens updates when available, restricting project file sources, and implementing strict access controls on engineering workstations. Countries with strong industrial bases and Siemens market penetration, such as Germany, France, Italy, and the UK, are most likely to be affected.

HighVulnerabilityGermanyFranceItaly+7#cve#cve-2025-40759#cwe-502