CVE-2025-40567

🗓️ 10 Jun 2025 15:17:28Reported by siemensType

Vulnerability found in multiple SCALANCE and RUGGEDCOM devices, all versions below 3.2.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Load Rollback() function in the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to compromise the integrity of protected information.	29 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-40567	10 Jun 202515:31	–	circl
CNNVD	Siemens多款产品安全漏洞	10 Jun 202500:00	–	cnnvd
CVE	CVE-2025-40567	10 Jun 202515:17	–	cve
EUVD	EUVD-2025-17681	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	10 Jun 202513:11	–	ncsc
NVD	CVE-2025-40567	10 Jun 202516:15	–	nvd
Positive Technologies	PT-2025-24675 · Siemens · Scalance Xcm328 +20	10 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40567	12 Jun 202515:21	–	redhatcve
Tenable Nessus	Siemens SCALANCE and RUGGEDCOM Incorrect Authorization (CVE-2025-40567)	10 Feb 202600:00	–	nessus

[
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM RST2428P",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCH328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM324",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM328",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XCM332",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRH334 (24 V DC, 8xFO, CC)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24 V DC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 12xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230 V AC, 8xFO)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-693776.html

13 Jan 2026 09:43Current

CVSS 3.16.5

CVSS 47.1

EPSS0.00391

CWE-863