CVE-2025-40805: Siemens Industrial Edge Cloud Device Iecd

Critical severity, CVSS 10.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

Affected products

  • Siemens Industrial Edge Cloud Device Iecd: before V1.24.2 (fixed in V1.24.2)
  • Siemens Industrial Edge Device Kit - ARM64 v1.10: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.11: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.12: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.13: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.14: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.15: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.16: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.17: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.18: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.19: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.20: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.21: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.22: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.23: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.24: before V1.24.2 (fixed in V1.24.2)
  • Siemens Industrial Edge Device Kit - ARM64 v1.25: before V1.25.1 (fixed in V1.25.1)
  • Siemens Industrial Edge Device Kit - ARM64 v1.5: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.6: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.7: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.8: any version
  • Siemens Industrial Edge Device Kit - ARM64 v1.9: any version
  • Siemens Industrial Edge Device Kit - x86-64 v1.10: any version
  • Siemens Industrial Edge Device Kit - x86-64 v1.11: any version
  • Siemens Industrial Edge Device Kit - x86-64 v1.12: any version
  • and 82 more

Published 2026-01-13. Last modified 2026-06-17.