Low severity · published Dec 9, 2025
CVE-2025-40818
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
3.3
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications contain private SSL/TLS keys on the server that are not properly protected allowing any user with server access to read these keys. This could allow an authenticated attacker to impersonate the server potentially enabling man-in-the-middle, traffic decryption or unauthorized access to services that trust these certificates.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SR
SINEMA Remote Connect Server · Siemens
before V3.2 SP4 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40818
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40818
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-626856.html
More from SINEMA Remote Connect Server
9.0
CVE-2021-40438
mod_proxy SSRF
9.9
CVE-2024-39872
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)
9.8
CVE-2022-32257
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2)
9.8
CVE-2022-32262
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
9.8
CVE-2022-32260
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)