CVE-2025-40567

🗓️ 10 Jun 2025 15:17:28Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 41 Views

Vulnerability identified in multiple SCALANCE devices, all versions below V3.2 require attention.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-40567	10 Jun 202515:31	–	circl
CNNVD	Siemens多款产品安全漏洞	10 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-40567	10 Jun 202515:17	–	cvelist
EUVD	EUVD-2025-17681	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	10 Jun 202513:11	–	ncsc
NVD	CVE-2025-40567	10 Jun 202516:15	–	nvd
Positive Technologies	PT-2025-24675 · Siemens · Scalance Xcm328 +20	10 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40567	12 Jun 202515:21	–	redhatcve
Tenable Nessus	Siemens SCALANCE and RUGGEDCOM Incorrect Authorization (CVE-2025-40567)	10 Feb 202600:00	–	nessus
Vulnrichment	CVE-2025-40567	10 Jun 202515:17	–	vulnrichment

[
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RST2428P",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCH328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM324",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM332",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRH334 (24 V DC, 8xFO, CC)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-693776.html

15 Apr 2026 00:35Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

CVSS 47.1

EPSS0.00078

SSVC

CWE-863