CVE-2025-40946A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet…
- 7.2HighCVSS base score
- 0.19%Exploitation in 30 daysEPSS · top 92% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 3.0 TL3-60.0 TL3 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions < V6.1.4.9), blueplanet gridsave 110 TL3-S (All versions < V3.91), blueplanet gridsave 137 TL3-S (All versions < V3.91), blueplanet gridsave 92.0 TL3-S (All versions < V3.91). A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.
Timeline
ID reserved
By siemens
- 13 months later
· 13 months later
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| siemensCNA (assigner) | 4.0 | High7.2 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N |
| siemensCNA (assigner) | 3.1 | High8.3 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H |
| NVDNVD · Awaiting Analysis | 4.0 | High7.2 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.19% · top 92% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.
Affected products
Siemens · blueplanet 100 NX3 M8
- affected < *
Siemens · blueplanet 100 TL3 GEN2
- affected < V6.1.4.9
- affected < V3.92
Siemens · blueplanet 105 TL3 GEN2
- affected < V6.1.4.9
- affected < V3.92
Siemens · blueplanet 125 NX3 M10
- affected < *
- affected < V3.92
Siemens · blueplanet 125 TL3 GEN2
- affected < V6.1.4.9
- affected < V3.92
- affected < V3.92
Siemens · blueplanet 150 TL3 GEN2
- affected < V6.1.4.9
- affected < V3.92
Siemens · blueplanet 155 TL3 GEN2
- affected < V6.1.4.9
- affected < V3.92
Siemens · blueplanet 165 TL3 GEN2
- affected < V6.1.4.9
Siemens · blueplanet 25.0 NX3-33.0 NX3
- unaffected < *
Siemens · blueplanet 3.0 NX3-20.0 NX3
- unaffected < *
Siemens · blueplanet 3.0 TL3-60.0 TL3
- affected < *
Siemens · blueplanet 3.0-5.0 NX1
- unaffected < *
Siemens · blueplanet 360 NX3 M6
- unaffected < *
Siemens · blueplanet 50.0 NX3-60.0 NX3
- unaffected < *
- affected < V3.92
Siemens · blueplanet 87.0 TL3 GEN2
- affected < V6.1.4.9
- affected < V3.92
Siemens · blueplanet 92.0 TL3 GEN2
- affected < V6.1.4.9
Siemens · blueplanet gridsave 110 TL3-S
- affected < V3.91
Siemens · blueplanet gridsave 137 TL3-S
- affected < V3.91
Siemens · blueplanet gridsave 92.0 TL3-S
- affected < V3.91
Siemens · blueplanet hybrid 10.0 TL3
- unaffected < *
Siemens · blueplanet hybrid 6.0 NH3-12.0 NH3
- unaffected < *
References
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-209779 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-40946)Record last updated .