[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpYFb9Twf2Wkn54eR5KffrJak1jDKrT7E13fu8nNfhgk":3,"g5a-risk:CVE-2025-40594":163},{"success":4,"data":5,"meta":160},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":30,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":70,"references":71,"referencesCount":31,"weaknesses":77,"weaknessesCount":31,"isActivelyExploited":57,"cisaInfo":30,"otxData":30,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":151,"notableEvents":152},"CVE-2025-40594","What is CVE-2025-40594?","A vulnerability has been identified in SINAMICS G220 V6.4 (All versions \u003C V6.4 HF2), SINAMICS S200 V6.4 (All versions), SINAMICS S210 V6.4 (All versions \u003C V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.","A vulnerability has been identified in SINAMICS G220 V6.4 (All versions \u003C V6.4 HF2), SINAMICS S200 V6.4 (All versions), SINAMICS S210 V6.4 (All versions \u003C V6...","2025-09-09T09:15:36.743","2025-10-20T19:20:29.113",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":42,"CVSSMetricV2":43,"CVSSMetricV40":30},[16,33],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":31,"ImpactScore":32},"productcert@siemens.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":27,"BaseScore":28,"BaseSeverity":29,"ExploitCodeMaturity":30,"RemediationLevel":30,"ReportConfidence":30,"TemporalScore":30,"TemporalSeverity":30,"ConfidentialityRequirement":30,"IntegrityRequirement":30,"AvailabilityRequirement":30,"ModifiedAttackVector":30,"ModifiedAttackComplexity":30,"ModifiedPrivilegesRequired":30,"ModifiedUserInteraction":30,"ModifiedScope":30,"ModifiedConfidentialityImpact":30,"ModifiedIntegrityImpact":30,"ModifiedAvailabilityImpact":30,"EnvironmentalScore":30,"EnvironmentalSeverity":30},"3.1","CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L","LOCAL","HIGH","NONE","REQUIRED","CHANGED","LOW",6.3,"MEDIUM",null,1,4.7,{"Source":34,"Type":35,"CVSSData":36,"ExploitabilityScore":40,"ImpactScore":41},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":37,"AttackComplexity":27,"PrivilegesRequired":24,"UserInteraction":24,"Scope":38,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":39,"ExploitCodeMaturity":30,"RemediationLevel":30,"ReportConfidence":30,"TemporalScore":30,"TemporalSeverity":30,"ConfidentialityRequirement":30,"IntegrityRequirement":30,"AvailabilityRequirement":30,"ModifiedAttackVector":30,"ModifiedAttackComplexity":30,"ModifiedPrivilegesRequired":30,"ModifiedUserInteraction":30,"ModifiedScope":30,"ModifiedConfidentialityImpact":30,"ModifiedIntegrityImpact":30,"ModifiedAvailabilityImpact":30,"EnvironmentalScore":30,"EnvironmentalSeverity":30},"NETWORK","UNCHANGED","CRITICAL",3.9,5.9,[],[],0.00209,[44,44,44,44,44,44,44],"Critical",[48,53,58,61,64,67],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"siemens","sinamics_g220_firmware","6.4","cpe:2.3:o:siemens:sinamics_g220_firmware:6.4:-:*:*:*:*:*:*",{"vendor":49,"product":54,"version":55,"criteria":56,"vulnerable":57},"sinamics_g220","-","cpe:2.3:h:siemens:sinamics_g220:-:-:*:*:*:*:*:*",false,{"vendor":49,"product":59,"version":51,"criteria":60,"vulnerable":4},"sinamics_s200_firmware","cpe:2.3:o:siemens:sinamics_s200_firmware:6.4:*:*:*:*:*:*:*",{"vendor":49,"product":62,"version":55,"criteria":63,"vulnerable":57},"sinamics_s200","cpe:2.3:h:siemens:sinamics_s200:-:*:*:*:*:*:*:*",{"vendor":49,"product":65,"version":51,"criteria":66,"vulnerable":4},"sinamics_s210_firmware","cpe:2.3:o:siemens:sinamics_s210_firmware:6.4:-:*:*:*:*:*:*",{"vendor":49,"product":68,"version":55,"criteria":69,"vulnerable":57},"sinamics_s210","cpe:2.3:h:siemens:sinamics_s210:-:-:*:*:*:*:*:*",6,[72],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-027652.html","Siemens",[76],"Vendor Advisory",[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2025-40594? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-40594, a critical severity cyber security vulnerability from 2025. A vulnerability has been identified in SINAMICS G220 V6...","CVE-2025-40594, CVE-2025-40594 vulnerability, CVE-2025-40594 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, siemens security, sinamics_g220_firmware vulnerability, sinamics_g220 vulnerability, sinamics_s200_firmware vulnerability, sinamics_s200 vulnerability, sinamics_s210_firmware vulnerability","\u002Fwhat-is\u002Fcve-2025-40594",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-40594","Cybersecurity","CVE-2025-40594, CVE-2025-40594 vulnerability, CVE-2025-40594 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113,128,138],{"Operator":114,"Negate":30,"Nodes":115},"AND",[116,124],{"Operator":117,"Negate":57,"CPEMatch":118},"OR",[119,121],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":120,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"826EA8F0-D952-45B0-992D-06FDD69C15DE",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":123,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"cpe:2.3:o:siemens:sinamics_g220_firmware:6.4:hf1:*:*:*:*:*:*","A667304B-DA27-4774-9E2D-427C8F82D92A",{"Operator":117,"Negate":57,"CPEMatch":125},[126],{"Vulnerable":57,"Criteria":56,"MatchCriteriaID":127,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"E1338801-EE2C-4B79-90CD-B89DC5D62222",{"Operator":114,"Negate":30,"Nodes":129},[130,134],{"Operator":117,"Negate":57,"CPEMatch":131},[132],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":133,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"177B0059-39B2-446B-9EE4-990A3B8DAE14",{"Operator":117,"Negate":57,"CPEMatch":135},[136],{"Vulnerable":57,"Criteria":63,"MatchCriteriaID":137,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"5A55ADD0-B32D-41F8-BB59-003440BEBA01",{"Operator":114,"Negate":30,"Nodes":139},[140,147],{"Operator":117,"Negate":57,"CPEMatch":141},[142,144],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":143,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"1DB28153-EF8D-4D75-B9B2-24EE4C1030D5",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":146,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"cpe:2.3:o:siemens:sinamics_s210_firmware:6.4:hf1:*:*:*:*:*:*","9F006E81-F8BF-4EA6-A972-B4209AF59C2C",{"Operator":117,"Negate":57,"CPEMatch":148},[149],{"Vulnerable":57,"Criteria":69,"MatchCriteriaID":150,"VersionStartExcluding":30,"VersionStartIncluding":30,"VersionEndExcluding":30,"VersionEndIncluding":30},"AF9F61F7-F7F3-45FE-8029-D1DD034FF993",[],[153],{"id":154,"eventType":155,"eventTime":156,"details":157,"label":158,"color":159},"0d19768c-c540-4787-935c-7b08b2726de5","NEW_NVD","2025-09-10T04:01:01.78598+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":161,"version":162},1792377184127,"2.0",{"score":164,"band":165,"action":166,"scoredAt":167},55,"Medium","Plan remediation","2026-10-16T07:08:46.481337+00:00"]