CVE-2025-40946

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3…

HIGHScheduled

Published:May 12, 2026(7 days ago)

Modified:May 12, 2026

Adjacent NetworkNo Auth RequiredNo InteractionLow Complexity

AI Explanation

A vulnerability in various blueplanet devices allows an attacker to derive Technical Service credentials from the device's serial number, potentially gaining unauthorized access. This is due to a weak CRC16-based algorithm used for generating these credentials. An attacker with adjacent network access could exploit this vulnerability.

▶Show original NVD description

A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions), blueplanet 125 NX3 M11 (All versions), blueplanet 125 TL3 (All versions), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions), blueplanet 150 TL3 (All versions), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 25.0 NX3-33.0 NX3 (All versions), blueplanet 3.0 NX3-20.0 NX3 (All versions), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 3.0-5.0 NX1 (All versions), blueplanet 360 NX3 M6 (All versions), blueplanet 50.0 NX3-60.0 NX3 (All versions), blueplanet 87.0 TL3 (All versions), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsafe 110 TL3-S (All versions < V3.91), blueplanet gridsafe 137 TL3-S (All versions < V3.91), blueplanet gridsafe 92.0 TL3-S (All versions < V3.91), blueplanet hybrid 10.0 TL3 (All versions), blueplanet hybrid 6.0 NH3-12.0 NH3 (All versions). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.

Administrators and users of blueplanet devices with outdated firmware are at high risk of unauthorized access and data breaches.

ADJACENT_NETWORKLow ComplexityNo Auth NeededNo User Interaction

Remediation Recommended

This vulnerability carries significant risk. Schedule patching in your next cycle.

Patch Status:Not Available

What should I do?

No official patch is available yet — apply vendor workarounds if provided.
Review the affected versions below to confirm your exposure.
Monitor this CVE for patch releases and apply them as soon as available.

How to Fix

1Update the device firmware to the latest version. 2. Change the Technical Service credentials to strong, unique passwords. 3. Limit network access to the device to only trusted sources.

Timeline

Published
CVE disclosed publicly
May 12, 20267 days ago
Last Modified
Most recent update
May 12, 20267 days ago
Indexed to CVEInsight
Added to this platform
May 12, 20266 days ago

References

https://cert-portal.siemens.com/productcert/html/ssa-545643.html

CVSS Score

v3.1

8.3/ 10.0

HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

At a Glance

Affected Products

References

CVE-2025-40946

AI Explanation

How to Fix

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

CVE-2025-40946

✦ AI Explanation

How to Fix

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

AI Explanation