CVE-2025-40943: Siemens Devices allow Code Injection via Malformed Trace Files
CVE-2025-40943 Published on March 10, 2026
Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering a legitimate user to import a specially crafted trace file
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2025-40943 has been classified to as a XSS vulnerability or weakness.
Products Associated with CVE-2025-40943
stack.watch emails you whenever new vulnerabilities are published in Siemens Simatic S7 1500 Software Controller or Siemens Simatic S7 Plcsim Advanced. Just hit a watch button to start following.
Affected Versions
Siemens SIMATIC Drive Controller CPU 1504D TF:- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before V4.1.2 is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.
- Before * is affected.