CVE-2025-40941
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Dec 9, 2025
CISA due date
—
The record
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server information in its responses. This could allow an attacker with network access to gain useful information, increasing the likelihood of targeted attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|