CVE-2025-40805

Published Jan 13, 2026

Last updated 9 days ago

CVSS critical 10.0
Scada

Overview

Description
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Source
productcert@siemens.com
NVD status
Deferred

Risk scores

CVSS 4.0

Type
Secondary
Base score
10
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
CRITICAL

CVSS 3.1

Type
Primary
Base score
10
Impact score
6
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

productcert@siemens.com
CWE-639

Social media

Hype score
Not currently trending

  1. ⚠️ Vulnerabilidades en productos Siemens ❗ CVE-2025-40944 ❗ CVE-2025-40924 ❗ CVE-2025-40805 ➡️ Más info: https://t.co/P6gvdy5yhr https://t.co/vPPLACnMjK

    @CERTpy

    15 Jan 2026

    98 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 New Critical CVE: CVE-2025-40805 📊 Score: 10.0 📝 Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate... 🔗 Read Details: https://t.co/pCkfZPVVHN #CVE #CyberSecurity #WatchStack

    @watchstackio

    13 Jan 2026

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2025-40805 Unauthenticated API Authentication Bypass Vulnerability in Target System https://t.co/tS39NAfCI7

    @VulmonFeeds

    13 Jan 2026

    0 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 🔴 CVE-2025-40805 - Critical Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersona... https://t.co/Y1nv1FkqWI https://t.co/kdO5SYb7t7

    @TheHackerWire

    13 Jan 2026

    51 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  5. [CVE-2025-40805: CRITICAL] Devices vulnerable to API endpoint authentication issues allow unauthenticated attackers to mimic legitimate users, risking cybersecurity. Stay vigilant against exploitation.#cve,CVE-2025-40805,#cybersecurity https://t.co/UW3uoozb8V https://t.co/aXE3TGb

    @CveFindCom

    13 Jan 2026

    166 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution.•CVE-2026-22553
  2. InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface. Malicious users that use the vulnerable endpoint are potentially able to cause remote code execution.•CVE-2026-21410
  3. FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through 1.2.10, an authentication bypass vulnerability in FUXA allows an unauthenticated, remote attacker to execute arbitrary code on the server when the Node-RED plugin is enabled. This has been patched in FUXA version 1.2.11.•CVE-2026-25938
  4. FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. From 1.2.8 through version 1.2.10, an authorization bypass vulnerability in the FUXA allows an unauthenticated, remote attacker to create and modify arbitrary schedulers, exposing connected ICS/SCADA environments to follow-on actions. This has been patched in FUXA version 1.2.11.•CVE-2026-25939
  5. FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. An insecure default configuration in FUXA allows an unauthenticated, remote attacker to gain administrative access and execute arbitrary code on the server. This affects FUXA through version 1.2.9 when authentication is enabled, but the administrator JWT secret is not configured. This issue has been patched in FUXA version 1.2.10.•CVE-2026-25894

References

Sources include official advisories and independent security research.