Riskcovery

CVE-2025-40946

State
Published
Severity
7.2 High
Published
May 12, 2026
Updated
Oct 13, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsave 110 TL3-S (All versions < V3.91), blueplanet gridsave 137 TL3-S (All versions < V3.91), blueplanet gridsave 92.0 TL3-S (All versions < V3.91). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.

Scores

CVSSScoreVectorSource
4.07.2 HighCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:Nsiemens
3.18.3 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:Hsiemens

Weaknesses

  • CWE-321 Use of Hard-coded Cryptographic Key

Affected Products

ProductVersions
blueplanet 100 NX3 M8Siemens
  • all versionsAffected
blueplanet 100 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 105 TL3Siemens
  • before V3.92Affected
blueplanet 105 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 110 TL3Siemens
  • before V3.92Affected
blueplanet 125 NX3 M10Siemens
  • all versionsAffected
blueplanet 125 TL3Siemens
  • before V3.92Affected
blueplanet 125 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 137 TL3Siemens
  • before V3.92Affected
blueplanet 150 TL3Siemens
  • before V3.92Affected
blueplanet 150 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 155 TL3Siemens
  • before V3.92Affected
blueplanet 155 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 165 TL3Siemens
  • before V3.92Affected
blueplanet 165 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 25.0 NX3-33.0 NX3Siemens
  • all versionsNot affected
blueplanet 3.0 NX3-20.0 NX3Siemens
  • all versionsNot affected
blueplanet 3.0 TL3-60.0 TL3Siemens
  • all versionsAffected
blueplanet 3.0-5.0 NX1Siemens
  • all versionsNot affected
blueplanet 360 NX3 M6Siemens
  • all versionsNot affected
blueplanet 50.0 NX3-60.0 NX3Siemens
  • all versionsNot affected
blueplanet 87.0 TL3Siemens
  • before V3.92Affected
blueplanet 87.0 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet 92.0 TL3Siemens
  • before V3.92Affected
blueplanet 92.0 TL3 GEN2Siemens
  • before V6.1.4.9Affected
blueplanet gridsave 110 TL3-SSiemens
  • before V3.91Affected
blueplanet gridsave 137 TL3-SSiemens
  • before V3.91Affected
blueplanet gridsave 92.0 TL3-SSiemens
  • before V3.91Affected
blueplanet hybrid 10.0 TL3Siemens
  • all versionsNot affected
blueplanet hybrid 6.0 NH3-12.0 NH3Siemens
  • all versionsNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.