{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-40946","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","state":"PUBLISHED","assignerShortName":"siemens","dateReserved":"2025-04-16T09:06:15.879Z","datePublished":"2026-05-12T08:20:50.525Z","dateUpdated":"2026-05-29T13:03:45.841Z"},"containers":{"cna":{"providerMetadata":{"orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","shortName":"siemens","dateUpdated":"2026-05-29T13:03:45.841Z"},"descriptions":[{"lang":"en","value":"A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions), blueplanet 150 TL3 (All versions), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 25.0 NX3-33.0 NX3 (All versions), blueplanet 3.0 NX3-20.0 NX3 (All versions), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 3.0-5.0 NX1 (All versions), blueplanet 360 NX3 M6 (All versions), blueplanet 50.0 NX3-60.0 NX3 (All versions), blueplanet 87.0 TL3 (All versions), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsave 110 TL3-S (All versions < V3.91), blueplanet gridsave 137 TL3-S (All versions < V3.91), blueplanet gridsave 92.0 TL3-S (All versions < V3.91), blueplanet hybrid 10.0 TL3 (All versions), blueplanet hybrid 6.0 NH3-12.0 NH3 (All versions). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access."}],"affected":[{"vendor":"Siemens","product":"blueplanet 100 NX3 M8","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 100 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 105 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 105 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 110 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 125 NX3 M10","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 125 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 125 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 137 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 150 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 150 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 155 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 155 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 165 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 165 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 25.0 NX3-33.0 NX3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 3.0 NX3-20.0 NX3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 3.0 TL3-60.0 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 3.0-5.0 NX1","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 360 NX3 M6","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 50.0 NX3-60.0 NX3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 87.0 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 87.0 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 92.0 TL3","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 92.0 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"V6.1.4.9","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet gridsave 110 TL3-S","versions":[{"status":"affected","version":"0","lessThan":"V3.91","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet gridsave 137 TL3-S","versions":[{"status":"affected","version":"0","lessThan":"V3.91","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet gridsave 92.0 TL3-S","versions":[{"status":"affected","version":"0","lessThan":"V3.91","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet hybrid 10.0 TL3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet hybrid 6.0 NH3-12.0 NH3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","baseScore":8.3,"baseSeverity":"HIGH"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":7.2,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-321","description":"CWE-321: Use of Hard-coded Cryptographic Key","type":"CWE"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-545643.html"}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-12T12:43:03.238502Z","id":"CVE-2025-40946","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-12T12:43:12.162Z"}}]}}