Description
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
INFO
Published Date :
2025-08-12T11:17:02.605Z
Last Modified :
2025-10-14T09:15:12.695Z
Source :
siemens
AFFECTED PRODUCTS
The following products are affected by CVE-2025-40584 vulnerability.
| Vendors | Products |
|---|---|
| Siemens |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-40584.
