CVE-2025-40939 | Siemens SIMATIC CN 4100 up to 4.0.0 USB Port access control (ssa-416652)

A vulnerability marked as critical has been reported in Siemens SIMATIC CN 4100 up to 4.0.0. This vulnerability affects unknown code of the component USB Port. The manipulation leads to improper access controls.

This vulnerability is traded as CVE-2025-40939. It is possible to launch the attack on the physical device. There is no exploit available.

It is suggested to upgrade the affected component.