CVE-2025-40584 XML external entity in SIMOTION SCOUT TIA V5.4
An attacker can read arbitrary files on the system by exploiting an XML External Entity injection vulnerability in Siemens engineering software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-40584?
CVE-2025-40584 is a medium-severity vulnerability in Siemens SIMOTION SCOUT TIA V5.4, published on 12 Aug 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability has been identified in SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT TIA V5.7 (All versions < V5.7 SP1 HF1), SIMOTION SCOUT V5.4 (All versions), SIMOTION SCOUT V5.5 (All versions), SIMOTION SCOUT V5.6 (All versions < V5.6 SP1 HF7), SIMOTION SCOUT V5.7 (All versions < V5.7 SP1 HF1), SINAMICS STARTER V5.5 (All versions), SINAMICS STARTER V5.6 (All versions), SINAMICS STARTER V5.7 (All versions < V5.7 HF2). The affected application contains a XML External Entity Injection (XXE) vulnerability while parsing specially crafted XML files. This could allow an attacker to read arbitrary files in the system.
Weakness: CWE-611
Which versions are affected by CVE-2025-40584?
How do I fix CVE-2025-40584?
No fix has been published for CVE-2025-40584 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-40584 being exploited?
There is no known exploitation of CVE-2025-40584 in the wild and no public exploit code.
Sources
Also known as GHSA-f2j7-8mgp-4g8f.