CVE-2025-40567

🗓️ 10 Jun 2025 15:17:28Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 49 Views

Vulnerability identified in multiple SCALANCE devices, all versions below V3.2 require attention.

Reporter	Title	Published	Views	Family All 11
bdu_fstec	The vulnerability of the Load Rollback() function in the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to compromise the integrity of protected information.	29 Aug 202500:00	–	bdu_fstec
circl	CVE-2025-40567	10 Jun 202515:31	–	circl
cnnvd	Siemens多款产品安全漏洞	10 Jun 202500:00	–	cnnvd
cvelist	CVE-2025-40567	10 Jun 202515:17	–	cvelist
euvd	EUVD-2025-17681	3 Oct 202520:07	–	euvd
ncsc	Vulnerabilities fixed in Siemens products	10 Jun 202513:11	–	ncsc
nvd	CVE-2025-40567	10 Jun 202516:15	–	nvd
ptsecurity	PT-2025-24675 · Siemens · Scalance Xcm328 +20	10 Jun 202500:00	–	ptsecurity
redhatcve	CVE-2025-40567	12 Jun 202515:21	–	redhatcve
nessus	Siemens SCALANCE and RUGGEDCOM Incorrect Authorization (CVE-2025-40567)	10 Feb 202600:00	–	nessus

[
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RST2428P",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCH328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM324",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM332",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRH334 (24 V DC, 8xFO, CC)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-693776.html

17 Jun 2026 09:21Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

CVSS 47.1

EPSS0.00387

SSVC

CWE-863