Web
CVE-2025-40805
10.0
Critical
EPSS 0.66%Jan 13, 2026
Unauthenticated API access allows impersonation via auth bypass.
common questions
Is CVE-2025-40805 being exploited?
Not confirmed. CVE-2025-40805 does not appear in CISA's Known Exploited Vulnerabilities catalog, which records only exploitation that has been observed and reported publicly. That is evidence of absence of a report, not evidence the flaw is unattacked. EPSS currently estimates a 0.66% probability of exploitation in the next 30 days.
How severe is CVE-2025-40805?
CVE-2025-40805 is rated Critical with a CVSS score of 10.0. Severity describes how bad exploitation would be, not how likely it is: pair it with exploitation evidence before deciding what to patch first.
Is there a patch for CVE-2025-40805?
Not known from our data. No patch reference has been recorded for CVE-2025-40805, which is not the same as no patch existing — a fix may have shipped without a tagged reference, or after this record was written. The vendor advisory is the only authority on whether a fix exists, and mitigations may be available regardless.
What should I do about CVE-2025-40805?
Restrict API access and monitor; patch when available.
Exploitation status reflects CISA's KEV catalog as we last synced it. Check the catalog directly.
executive summary
technical analysis
impact
Unauthenticated attacker can bypass API authentication and impersonate a user.
action required
Immediate action required
affected versions
Siemens Industrial Edge Cloud Device (IECD)
- affected< V1.24.2
Siemens Industrial Edge Device Kit - arm64 V1.10
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.11
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.12
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.13
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.14
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.15
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.16
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.17
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.18
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.19
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.20
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.21
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.22
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.23
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.24
- affected< V1.24.2
Siemens Industrial Edge Device Kit - arm64 V1.25
- affected< V1.25.1
Siemens Industrial Edge Device Kit - arm64 V1.5
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.6
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.7
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.8
- affected< *
Siemens Industrial Edge Device Kit - arm64 V1.9
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.10
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.11
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.12
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.13
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.14
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.15
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.16
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.17
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.18
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.19
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.20
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.21
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.22
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.23
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.24
- affected< V1.24.2
Siemens Industrial Edge Device Kit - x86-64 V1.25
- affected< V1.25.1
Siemens Industrial Edge Device Kit - x86-64 V1.5
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.6
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.7
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.8
- affected< *
Siemens Industrial Edge Device Kit - x86-64 V1.9
- affected< *
Siemens Industrial Edge Own Device (IEOD)
- affected< V1.24.2
Siemens Industrial Edge Virtual Device (IEVD)
- affected< V1.24.2
Siemens SCALANCE LPE9413
- affected< V2.2
Siemens SCALANCE LPE9433
- affected< V2.2
Siemens SIMATIC Automation Workstation 19"
- affected< V1.3
Siemens SIMATIC Automation Workstation 24"
- affected< V1.3
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel
- affected< V21
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic
- affected< V21
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design
- affected< V21
Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral
- affected< V21
Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit
- affected< V21
Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
- affected< V21
Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel
- affected< V21
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic
- affected< V21
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design
- affected< V21
Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design
- affected< V21
Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit
- affected< V21
Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
- affected< V21
Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel
- affected< V21
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic
- affected< V21
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design
- affected< V21
Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design
- affected< V21
Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit
- affected< V21
Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
- affected< V21
Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel
- affected< V21
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic
- affected< V21
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design
- affected< V21
Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design
- affected< V21
Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit
- affected< V21
Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
- affected< V21
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
- affected< V21
Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)
- affected< V21
Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic
- affected< V21
Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design
- affected< V21
Siemens SIMATIC HMI MTP2200 Unified Comfort Panel
- affected< V21
Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design
- affected< V21
Siemens SIMATIC HMI MTP700 Unified Comfort Panel
- affected< V21
Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
- affected< V21
Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design
- affected< V21
Siemens SIMATIC IOT2050
- affected< V1.25.1
Siemens SIMATIC IPC127E Industrial Edge Device
- affected< V3.1
Siemens SIMATIC IPC227E Industrial Edge Device
- affected< V3.1
Siemens SIMATIC IPC227G Industrial Edge Device
- affected< V3.1
Siemens SIMATIC IPC427E Industrial Edge Device
- affected< V3.1
Siemens SIMATIC IPC847E Industrial Edge Device
- affected< V3.1
Siemens SIMATIC IPC BX-39A Industrial Edge Device
- affected< V3.1
Siemens SIMATIC IPC BX-59A Industrial Edge Device
- affected< V3.1
Siemens SIPLUS HMI MTP1000 Unified Comfort
- affected< V21
Siemens SIPLUS HMI MTP1200 Unified Comfort
- affected< V21
Siemens SIPLUS HMI MTP700 Unified Comfort
- affected< V21
As published in the CVE Program record. A version outside these ranges is not a statement that it is unaffected — vendors sometimes understate a range, and distribution-backported builds carry upstream numbers that do not reflect what was patched into them.
how to fix
Remediation steps are tailored for users whose stack is affected. Add this technology to your stack to see the fix checklist.
references