{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-40946", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2025-04-16T09:06:15.879Z", "datePublished": "2026-05-12T08:20:50.525Z", "dateUpdated": "2026-05-12T08:20:50.525Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-05-12T08:20:50.525Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions), blueplanet 125 NX3 M11 (All versions), blueplanet 125 TL3 (All versions), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions), blueplanet 150 TL3 (All versions), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 25.0 NX3-33.0 NX3 (All versions), blueplanet 3.0 NX3-20.0 NX3 (All versions), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 3.0-5.0 NX1 (All versions), blueplanet 360 NX3 M6 (All versions), blueplanet 50.0 NX3-60.0 NX3 (All versions), blueplanet 87.0 TL3 (All versions), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsafe 110 TL3-S (All versions < V3.91), blueplanet gridsafe 137 TL3-S (All versions < V3.91), blueplanet gridsafe 92.0 TL3-S (All versions < V3.91), blueplanet hybrid 10.0 TL3 (All versions), blueplanet hybrid 6.0 NH3-12.0 NH3 (All versions). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access."}], "affected": [{"vendor": "Siemens", "product": "blueplanet 100 NX3 M8", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 100 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 105 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 105 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 110 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 125 NX3 M11", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 125 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 125 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 137 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 150 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 150 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 155 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 155 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 165 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 165 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 25.0 NX3-33.0 NX3", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 3.0 NX3-20.0 NX3", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 3.0 TL3-60.0 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 3.0-5.0 NX1", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 360 NX3 M6", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 50.0 NX3-60.0 NX3", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 87.0 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 87.0 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 92.0 TL3", "versions": [{"status": "affected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet 92.0 TL3 GEN2", "versions": [{"status": "affected", "version": "0", "lessThan": "V6.1.4.9", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet gridsafe 110 TL3-S", "versions": [{"status": "affected", "version": "0", "lessThan": "V3.91", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet gridsafe 137 TL3-S", "versions": [{"status": "affected", "version": "0", "lessThan": "V3.91", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet gridsafe 92.0 TL3-S", "versions": [{"status": "affected", "version": "0", "lessThan": "V3.91", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet hybrid 10.0 TL3", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "blueplanet hybrid 6.0 NH3-12.0 NH3", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "baseScore": 8.3, "baseSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-321", "description": "CWE-321: Use of Hard-coded Cryptographic Key", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-545643.html"}]}}}
MITRE
Vulnrichment
NVD
Redhat
OpenCVE Enrichment