CVE-2025-38677
View CSAF Summary SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version f...
Affects 2 products across 4 vendors.
Software reads data past the boundary of an allocated buffer, leaking sensitive information or causing crashes.
The Siemens SIMATIC CN 4100 is affected by multiple vulnerabilities, including NULL Pointer Dereference, Reachable Assertion, Use After Free, and Out-of-bounds Write, which could compromise availability, integrity, and confidentiality. Siemens recommends updating to the latest version to mitigate these risks.
BSID: BS-2026-GLOBAL-256931-H • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-38677?
What is the CVSS score for CVE-2025-38677?
Is CVE-2025-38677 actively exploited?
How do I remediate CVE-2025-38677?
What systems are affected by CVE-2025-38677?
What NERC-CIP standard applies to CVE-2025-38677?
What IEC 62443 requirement maps to CVE-2025-38677?
| CVE ID | CVE-2025-38677 |
|---|---|
| BSID | BS-2026-GLOBAL-256931-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
| Published | 2026-05-14 |
| Last Modified | 2026-05-14 |
| ICS Relevance | 80% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
View CSAF Summary SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version. The following versions of Siemens SIMATIC are affected: SIMATIC CN 4100 vers:intdot/<5.0 CVSS Vendor Equipment Vulnerabilities v3 9.6 Siemens Siemens SIMATIC NULL Pointer Dereference, Reachable Assertion, Use After Free, Out-of-bounds W
Source: NIST NVD / MITRE CVE Database
The vulnerabilities are locally exploitable with low privileges and do not require user interaction. An attacker with local access could potentially exploit these vulnerabilities to cause a denial of service, data corruption, or unauthorized access.
Exploitation Likelihood: LOW
| Vendor | Product | Fixed Version |
|---|---|---|
| Debian | Debian Linux | — |
| Fujitsu-Siemens | — | — |
| Linux | Linux Kernel | — |
| Siemens | — | — |
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict access controls and monitor for unusual activity on affected systems.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. SAGE only publishes a network rule when a concrete on-the-wire signature can be grounded in the advisory.
This CVE could allow an attacker to compromise the availability and integrity of the control system, violating the requirement for secure access to critical cyber assets.
The vulnerabilities could be exploited to cause a denial of service or unauthorized access, which aligns with the requirement for secure software development and maintenance practices.
Virtual patch generated by CITED Relevance SAGE. Validate in isolated environment before production deployment. Compensating control only - does not replace vendor patch.
SAGE Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 12d0b23bd9ace7e6d24925d79abb5414969d3852673cd6654556655843ebef59af2fb33bd939f8ec83167b7dd6ef15e4598bc237e47bb7563cc5e1cce033023a |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.
Join free →