Privilege escalation in Siemens Sinamics G220
CVE-2025-40594
A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.
Vulnerability class: Privilege Escalation
EPSS: 0.002 (10.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:L.
Affected products
- Siemens Sinamics_g220
- Siemens Sinamics_g220_firmware — versions 6.4
- Siemens Sinamics G220 V6.4 — versions 0
- Siemens Sinamics_s200
- Siemens Sinamics_s200_firmware — versions 6.4
- Siemens Sinamics S200 V6.4 — versions 0
- Siemens Sinamics_s210
- Siemens Sinamics_s210_firmware — versions 6.4
- Siemens Sinamics S210 V6.4 — versions 0
Weakness classification (CWE)
References
- productcert@siemens.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-40594?
- CVE-2025-40594 is a medium-severity vulnerability in Siemens Sinamics G220, classified under Improper Privilege Management. CVSS score: 6.3/10. Published 2025-09-09.
- How severe is CVE-2025-40594?
- Medium severity. CVSS v3 base score is 6.3 out of 10.