Veille CVE

Semaine du 8 septembre au 14 septembre 2025

3 CVE sur 7

Critique 3 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-21043 9.8 Critique Exploitée

    Samsung Mobile Devices · Samsung android

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

  2. CVE-2025-40795 9.8 Critique

    Siemens SIMATIC PCS neo V4.1 · Siemens SIMATIC PCS neo V5.0 · Siemens SIMATIC PCS neo V6.0 · Siemens User Management Component (UMC)

    A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.

  3. CVE-2025-40594 9.8 Critique

    Siemens SINAMICS G220 V6.4 · Siemens SINAMICS S200 V6.4 · Siemens SINAMICS S210 V6.4 · Siemens sinamics g220 firmware

    A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All versions < V6.4 HF7), SINAMICS S210 V6.4 (All versions < V6.4 HF2). The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as well as manipulation of configuration data because of leaked privileges of previous sessions. This could allow an unauthorized attacker to escalate their privileges.