CVE-2025-40805

CVE-2025-40805 affects Siemens Industrial Edge Devices. The issue is an authentication bypass on specific API endpoints, allowing an unauthenticated remote attacker to learn a legitimate user identity and impersonate that user. Root cause described across sources is improper enforcement of user a...

Authentication flaw

Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...