CVE-2025-40805
Critical
Description
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
SeverityCritical
CVSS10.0
Exploit probability—
ProductIndustrial Edge Cloud Device (IECD)
PublishedJan 13, 2026
First seenJan 13, 2026
How to fix
Update
- Siemens Industrial Edge Cloud Device (IECD)V1.24.2 or later
- Siemens Industrial Edge Device Kit - arm64 V1.24V1.24.2 or later
- Siemens Industrial Edge Device Kit - arm64 V1.25V1.25.1 or later
- Siemens Industrial Edge Device Kit - x86-64 V1.24V1.24.2 or later
- Siemens Industrial Edge Device Kit - x86-64 V1.25V1.25.1 or later
- Siemens Industrial Edge Own Device (IEOD)V1.24.2 or later
- Siemens Industrial Edge Virtual Device (IEVD)V1.24.2 or later
- Siemens SCALANCE LPE9413V2.2 or later
- Siemens SCALANCE LPE9433V2.2 or later
- Siemens SIMATIC Automation Workstation 19"V1.3 or later
- Siemens SIMATIC Automation Workstation 24"V1.3 or later
- Siemens SIMATIC HMI MTP1000 Unified Comfort PanelV21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens Industrial Edge Cloud Device (IECD) | v < V1.24.2 | V1.24.2 |
| Siemens Industrial Edge Device Kit - arm64 V1.10 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.11 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.12 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.13 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.14 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.15 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.16 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.17 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.18 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.19 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.20 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.21 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.22 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.23 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.24 | v < V1.24.2 | V1.24.2 |
| Siemens Industrial Edge Device Kit - arm64 V1.25 | v < V1.25.1 | V1.25.1 |
| Siemens Industrial Edge Device Kit - arm64 V1.5 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.6 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.7 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.8 | 0 | — |
| Siemens Industrial Edge Device Kit - arm64 V1.9 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.10 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.11 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.12 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.13 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.14 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.15 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.16 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.17 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.18 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.19 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.20 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.21 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.22 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.23 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.24 | v < V1.24.2 | V1.24.2 |
| Siemens Industrial Edge Device Kit - x86-64 V1.25 | v < V1.25.1 | V1.25.1 |
| Siemens Industrial Edge Device Kit - x86-64 V1.5 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.6 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.7 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.8 | 0 | — |
| Siemens Industrial Edge Device Kit - x86-64 V1.9 | 0 | — |
| Siemens Industrial Edge Own Device (IEOD) | v < V1.24.2 | V1.24.2 |
| Siemens Industrial Edge Virtual Device (IEVD) | v < V1.24.2 | V1.24.2 |
| Siemens SCALANCE LPE9413 | v < V2.2 | V2.2 |
| Siemens SCALANCE LPE9433 | v < V2.2 | V2.2 |
| Siemens SIMATIC Automation Workstation 19" | v < V1.3 | V1.3 |
| Siemens SIMATIC Automation Workstation 24" | v < V1.3 | V1.3 |
| Siemens SIMATIC HMI MTP1000 Unified Comfort Panel | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Unified Comfort Panel | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Unified Comfort Panel | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Unified Comfort Panel | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Unified Comfort Panel | v < V21 | V21 |
| Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP700 Unified Comfort Panel | v < V21 | V21 |
| Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | v < V21 | V21 |
| Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design | v < V21 | V21 |
| Siemens SIMATIC IOT2050 | v < V1.25.1 | V1.25.1 |
| Siemens SIMATIC IPC BX-39A Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIMATIC IPC BX-59A Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIMATIC IPC127E Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIMATIC IPC227E Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIMATIC IPC227G Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIMATIC IPC427E Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIMATIC IPC847E Industrial Edge Device | v < V3.1 | V3.1 |
| Siemens SIPLUS HMI MTP1000 Unified Comfort | v < V21 | V21 |
| Siemens SIPLUS HMI MTP1200 Unified Comfort | v < V21 | V21 |
| Siemens SIPLUS HMI MTP700 Unified Comfort | v < V21 | V21 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.