CVE-2025-40818

3.3 Faible

Publiée le 09/12/2025 à 17:17 · Modifiée le 24/10/2026 à 00:10 · Analysée par le NVD · Source : productcert@siemens.com

Description

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.

Traduire en français

Produits concernés

Siemens SINEMA Remote Connect Server

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.3 Faible	productcert@siemens.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-732

Références

https://cert-portal.siemens.com/productcert/html/ssa-626856.html Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories