Siemens Device Bypass Auth on API Endpoints (CVE-2025-40805)
CVE-2025-40805 Published on January 13, 2026

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.

NVD

Weakness Type

What is an Insecure Direct Object Reference / IDOR Vulnerability?

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

CVE-2025-40805 has been classified to as an Insecure Direct Object Reference / IDOR vulnerability or weakness.

Affected Versions

Siemens Industrial Edge Cloud Device (IECD):

Before V1.24.2 is affected.

Siemens Industrial Edge Device Kit - arm64 V1.10:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.11:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.12:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.13:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.14:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.15:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.16:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.17:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.18:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.19:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.20:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.21:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.22:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.23:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.24:

Before V1.24.2 is affected.

Siemens Industrial Edge Device Kit - arm64 V1.25:

Before V1.25.1 is affected.

Siemens Industrial Edge Device Kit - arm64 V1.5:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.6:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.7:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.8:

Before * is affected.

Siemens Industrial Edge Device Kit - arm64 V1.9:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.10:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.11:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.12:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.13:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.14:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.15:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.16:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.17:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.18:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.19:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.20:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.21:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.22:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.23:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.24:

Before V1.24.2 is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.25:

Before V1.25.1 is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.5:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.6:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.7:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.8:

Before * is affected.

Siemens Industrial Edge Device Kit - x86-64 V1.9:

Before * is affected.

Siemens Industrial Edge Own Device (IEOD):

Before V1.24.2 is affected.

Siemens Industrial Edge Virtual Device (IEVD):

Before V1.24.2 is affected.

Siemens SCALANCE LPE9413:

Before V2.2 is affected.

Siemens SCALANCE LPE9433:

Before V2.2 is affected.

Siemens SIMATIC Automation Workstation 19":

Before * is affected.

Siemens SIMATIC Automation Workstation 24":

Before * is affected.

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel:

Before V21 is affected.

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic:

Before V21 is affected.

Siemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP1000, Unified Comfort Panel neutral:

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio:

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel:

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic:

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP1200 Unified Comfort Panel neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio:

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel:

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic:

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP1500 Unified Comfort Panel neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio:

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel:

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic:

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP1900 Unified Comfort Panel neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit:

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom):

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio:

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top):

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic:

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Panel:

Before V21 is affected.

Siemens SIMATIC HMI MTP2200 Unified Comfort Panel neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP700 Unified Comfort Panel:

Before V21 is affected.

Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design:

Before V21 is affected.

Siemens SIMATIC HMI MTP700, Unified Comfort Panel neutral design:

Before V21 is affected.

Siemens SIMATIC IOT2050:

Before V1.25.1 is affected.

Siemens SIMATIC IPC BX-39A Industrial Edge Device:

Before V3.1 is affected.

Siemens SIMATIC IPC BX-59A Industrial Edge Device:

Before V3.1 is affected.

Siemens SIMATIC IPC127E Industrial Edge Device:

Before V3.1 is affected.

Siemens SIMATIC IPC227E Industrial Edge Device:

Before V3.1 is affected.

Siemens SIMATIC IPC227G Industrial Edge Device:

Before V3.1 is affected.

Siemens SIMATIC IPC427E Industrial Edge Device:

Before V3.1 is affected.

Siemens SIMATIC IPC847E Industrial Edge Device:

Before V3.1 is affected.

Siemens SIPLUS HMI MTP1000 Unified Comfort:

Before V21 is affected.

Siemens SIPLUS HMI MTP1200 Unified Comfort:

Before V21 is affected.

Siemens SIPLUS HMI MTP700 Unified Comfort:

Before V21 is affected.

Exploit Probability

EPSS

0.08%

Percentile

23.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

Siemens Device Bypass Auth on API Endpoints (CVE-2025-40805)CVE-2025-40805 Published on January 13, 2026

Weakness Type

What is an Insecure Direct Object Reference / IDOR Vulnerability?

Affected Versions

Exploit Probability

Siemens Device Bypass Auth on API Endpoints (CVE-2025-40805)
CVE-2025-40805 Published on January 13, 2026