SSA-545643
Vulnerability from csaf_siemens - Published: 2026-05-12 00:00 - Updated: 2026-10-13 00:00Summary
SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters
Notes
Summary: KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.
KACO new energy GmbH has released new versions for several affected products and recommends to update to the latest versions. KACO new energy GmbH is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
General Recommendations: Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.
8.3 (High)
Affected products
Known affected
23 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
blueplanet 100 NX3 M8
Siemens / blueplanet 100 NX3 M8
|
vers:all/* |
None Available
|
|
|
blueplanet 125 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 125 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 137 TL3 < V3.92
Siemens / blueplanet 137 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 150 TL3 < V3.92
Siemens / blueplanet 150 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 150 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 150 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 155 TL3 < V3.92
Siemens / blueplanet 155 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 155 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 155 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 165 TL3 < V3.92
Siemens / blueplanet 165 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 165 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 165 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 3.0 TL3-60.0 TL3
Siemens / blueplanet 3.0 TL3-60.0 TL3
|
vers:all/* |
No Fix Planned
|
|
|
blueplanet 87.0 TL3 < V3.92
Siemens / blueplanet 87.0 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 100 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 100 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 87.0 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 87.0 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 92.0 TL3 < V3.92
Siemens / blueplanet 92.0 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 92.0 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 92.0 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet gridsave 110 TL3-S < V3.91
Siemens / blueplanet gridsave 110 TL3-S
|
vers:intdot/<3.91 |
Vendor Fix
fix
|
|
|
blueplanet gridsave 137 TL3-S < V3.91
Siemens / blueplanet gridsave 137 TL3-S
|
vers:intdot/<3.91 |
Vendor Fix
fix
|
|
|
blueplanet gridsave 92.0 TL3-S < V3.91
Siemens / blueplanet gridsave 92.0 TL3-S
|
vers:intdot/<3.91 |
Vendor Fix
fix
|
|
|
blueplanet 105 TL3 < V3.92
Siemens / blueplanet 105 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 105 TL3 GEN2 < V6.1.4.9
Siemens / blueplanet 105 TL3 GEN2
|
vers:intdot/<6.1.4.9 |
Vendor Fix
fix
|
|
|
blueplanet 110 TL3 < V3.92
Siemens / blueplanet 110 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 125 NX3 M10
Siemens / blueplanet 125 NX3 M10
|
vers:all/* |
None Available
|
|
|
blueplanet 125 TL3 < V3.92
Siemens / blueplanet 125 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
blueplanet 25.0 NX3-33.0 NX3
Siemens / blueplanet 25.0 NX3-33.0 NX3
|
vers:all/* | ||
|
blueplanet 3.0 NX3-20.0 NX3
Siemens / blueplanet 3.0 NX3-20.0 NX3
|
vers:all/* | ||
|
blueplanet 3.0-5.0 NX1
Siemens / blueplanet 3.0-5.0 NX1
|
vers:all/* | ||
|
blueplanet 360 NX3 M6
Siemens / blueplanet 360 NX3 M6
|
vers:all/* | ||
|
blueplanet 50.0 NX3-60.0 NX3
Siemens / blueplanet 50.0 NX3-60.0 NX3
|
vers:all/* | ||
|
blueplanet hybrid 10.0 TL3
Siemens / blueplanet hybrid 10.0 TL3
|
vers:all/* | ||
|
blueplanet hybrid 6.0 NH3-12.0 NH3
Siemens / blueplanet hybrid 6.0 NH3-12.0 NH3
|
vers:all/* |
Threats
Impact
Different code base compared to affected products.
Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.
6.0 (Medium)
Affected products
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
blueplanet 100 NX3 M8
Siemens / blueplanet 100 NX3 M8
|
vers:all/* |
None Available
|
|
|
blueplanet 125 TL3 GEN2
Siemens / blueplanet 125 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 137 TL3 < V3.92
Siemens / blueplanet 137 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 150 TL3 < V3.92
Siemens / blueplanet 150 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 150 TL3 GEN2
Siemens / blueplanet 150 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 155 TL3 < V3.92
Siemens / blueplanet 155 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 155 TL3 GEN2
Siemens / blueplanet 155 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 165 TL3 < V3.92
Siemens / blueplanet 165 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 100 TL3 GEN2
Siemens / blueplanet 100 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 165 TL3 GEN2
Siemens / blueplanet 165 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 87.0 TL3 < V3.92
Siemens / blueplanet 87.0 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 87.0 TL3 GEN2
Siemens / blueplanet 87.0 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 92.0 TL3 < V3.92
Siemens / blueplanet 92.0 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 92.0 TL3 GEN2
Siemens / blueplanet 92.0 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet gridsave 110 TL3-S < V3.92
Siemens / blueplanet gridsave 110 TL3-S
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet gridsave 137 TL3-S < V3.92
Siemens / blueplanet gridsave 137 TL3-S
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet gridsave 92.0 TL3-S < V3.92
Siemens / blueplanet gridsave 92.0 TL3-S
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 105 TL3 < V3.92
Siemens / blueplanet 105 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 105 TL3 GEN2
Siemens / blueplanet 105 TL3 GEN2
|
vers:all/* |
None Available
|
|
|
blueplanet 110 TL3 < V3.92
Siemens / blueplanet 110 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
|
|
blueplanet 125 NX3 M10
Siemens / blueplanet 125 NX3 M10
|
vers:all/* |
None Available
|
|
|
blueplanet 125 TL3 < V3.92
Siemens / blueplanet 125 TL3
|
vers:intdot/<3.92 |
Vendor Fix
fix
|
Known not affected
7 products, the same list as for
CVE-2025-40946
Threats
Impact
Different code base compared to affected products.
References
2 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.\n\nKACO new energy GmbH has released new versions for several affected products and recommends to update to the latest versions. KACO new energy GmbH is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. \nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-545643.html"
},
{
"category": "self",
"summary": "SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-545643.json"
}
],
"title": "SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters",
"tracking": {
"current_release_date": "2026-10-13T00:00:00.000Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-545643",
"initial_release_date": "2026-05-12T00:00:00.000Z",
"revision_history": [
{
"date": "2026-05-12T00:00:00.000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2026-05-29T00:00:00.000Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Name of blueplanet gridsafe 92.0 TL3-S was updated to blueplanet gridsave 92.0 TL3-S, Name of blueplanet gridsafe 137 TL3-S was updated to blueplanet gridsave 137 TL3-S, Name of blueplanet gridsafe 110 TL3-S was updated to blueplanet gridsave 110 TL3-S and Name of blueplanet 125 NX3 M11 was updated to blueplanet 125 NX3 M10"
},
{
"date": "2026-10-13T00:00:00.000Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Added fix (v3.92) for blueplanet gridsafe 92.0-137 TL3-S and for blueplanet 3.0 87.0 TL3 - 165 TL3"
}
],
"status": "interim",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 100 NX3 M8",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "blueplanet 100 NX3 M8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 100 TL3 GEN2",
"product_id": "2"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 100 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "3"
}
}
],
"category": "product_name",
"name": "blueplanet 100 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 105 TL3 \u003c V3.92",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "blueplanet 105 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 105 TL3 GEN2",
"product_id": "5"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 105 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "6"
}
}
],
"category": "product_name",
"name": "blueplanet 105 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 110 TL3 \u003c V3.92",
"product_id": "7"
}
}
],
"category": "product_name",
"name": "blueplanet 110 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 125 NX3 M10",
"product_id": "8"
}
}
],
"category": "product_name",
"name": "blueplanet 125 NX3 M10"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 125 TL3 \u003c V3.92",
"product_id": "9"
}
}
],
"category": "product_name",
"name": "blueplanet 125 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 125 TL3 GEN2",
"product_id": "10"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 125 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "11"
}
}
],
"category": "product_name",
"name": "blueplanet 125 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 137 TL3 \u003c V3.92",
"product_id": "12"
}
}
],
"category": "product_name",
"name": "blueplanet 137 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 150 TL3 \u003c V3.92",
"product_id": "13"
}
}
],
"category": "product_name",
"name": "blueplanet 150 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 150 TL3 GEN2",
"product_id": "14"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 150 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "15"
}
}
],
"category": "product_name",
"name": "blueplanet 150 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 155 TL3 \u003c V3.92",
"product_id": "16"
}
}
],
"category": "product_name",
"name": "blueplanet 155 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 155 TL3 GEN2",
"product_id": "17"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 155 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "18"
}
}
],
"category": "product_name",
"name": "blueplanet 155 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 165 TL3 \u003c V3.92",
"product_id": "19"
}
}
],
"category": "product_name",
"name": "blueplanet 165 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 165 TL3 GEN2",
"product_id": "20"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 165 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "21"
}
}
],
"category": "product_name",
"name": "blueplanet 165 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 25.0 NX3-33.0 NX3",
"product_id": "22"
}
}
],
"category": "product_name",
"name": "blueplanet 25.0 NX3-33.0 NX3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 3.0 NX3-20.0 NX3",
"product_id": "23"
}
}
],
"category": "product_name",
"name": "blueplanet 3.0 NX3-20.0 NX3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 3.0 TL3-60.0 TL3",
"product_id": "24"
}
}
],
"category": "product_name",
"name": "blueplanet 3.0 TL3-60.0 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 3.0-5.0 NX1",
"product_id": "25"
}
}
],
"category": "product_name",
"name": "blueplanet 3.0-5.0 NX1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 360 NX3 M6",
"product_id": "26"
}
}
],
"category": "product_name",
"name": "blueplanet 360 NX3 M6"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 50.0 NX3-60.0 NX3",
"product_id": "27"
}
}
],
"category": "product_name",
"name": "blueplanet 50.0 NX3-60.0 NX3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 87.0 TL3 \u003c V3.92",
"product_id": "28"
}
}
],
"category": "product_name",
"name": "blueplanet 87.0 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 87.0 TL3 GEN2",
"product_id": "29"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 87.0 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "30"
}
}
],
"category": "product_name",
"name": "blueplanet 87.0 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet 92.0 TL3 \u003c V3.92",
"product_id": "31"
}
}
],
"category": "product_name",
"name": "blueplanet 92.0 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet 92.0 TL3 GEN2",
"product_id": "32"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c6.1.4.9",
"product": {
"name": "blueplanet 92.0 TL3 GEN2 \u003c V6.1.4.9",
"product_id": "33"
}
}
],
"category": "product_name",
"name": "blueplanet 92.0 TL3 GEN2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.91",
"product": {
"name": "blueplanet gridsave 110 TL3-S \u003c V3.91",
"product_id": "34"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet gridsave 110 TL3-S \u003c V3.92",
"product_id": "35"
}
}
],
"category": "product_name",
"name": "blueplanet gridsave 110 TL3-S"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.91",
"product": {
"name": "blueplanet gridsave 137 TL3-S \u003c V3.91",
"product_id": "36"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet gridsave 137 TL3-S \u003c V3.92",
"product_id": "37"
}
}
],
"category": "product_name",
"name": "blueplanet gridsave 137 TL3-S"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.92",
"product": {
"name": "blueplanet gridsave 92.0 TL3-S \u003c V3.92",
"product_id": "38"
}
},
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.91",
"product": {
"name": "blueplanet gridsave 92.0 TL3-S \u003c V3.91",
"product_id": "39"
}
}
],
"category": "product_name",
"name": "blueplanet gridsave 92.0 TL3-S"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet hybrid 10.0 TL3",
"product_id": "40"
}
}
],
"category": "product_name",
"name": "blueplanet hybrid 10.0 TL3"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "blueplanet hybrid 6.0 NH3-12.0 NH3",
"product_id": "41"
}
}
],
"category": "product_name",
"name": "blueplanet hybrid 6.0 NH3-12.0 NH3"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-40946",
"cwe": {
"id": "CWE-321",
"name": "Use of Hard-coded Cryptographic Key"
},
"flags": [
{
"label": "component_not_present",
"product_ids": [
"26",
"40",
"25",
"23",
"22",
"41",
"27"
]
}
],
"notes": [
{
"category": "description",
"text": "A CRC16-based algorithm for generating Technical Service credentials could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1",
"11",
"12",
"13",
"15",
"16",
"18",
"19",
"21",
"24",
"28",
"3",
"30",
"31",
"33",
"34",
"36",
"39",
"4",
"6",
"7",
"8",
"9"
],
"known_not_affected": [
"22",
"23",
"25",
"26",
"27",
"40",
"41"
]
},
"remediations": [
{
"category": "no_fix_planned",
"details": "Currently no fix is planned",
"product_ids": [
"24"
]
},
{
"category": "none_available",
"details": "Currently no fix is available",
"product_ids": [
"1",
"8"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.91 or later version",
"product_ids": [
"34"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V3.91 or later version",
"product_ids": [
"39"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V3.91 or later version",
"product_ids": [
"36"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V3.92 or later version",
"product_ids": [
"12",
"13",
"16",
"19",
"28",
"31",
"4",
"7",
"9"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"21"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"11"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"3"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"33"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"18"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"6"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"30"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V6.1.4.9 or later version",
"product_ids": [
"15"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"11",
"12",
"13",
"15",
"16",
"18",
"19",
"21",
"24",
"28",
"3",
"30",
"31",
"33",
"34",
"36",
"39",
"4",
"6",
"7",
"8",
"9"
]
}
],
"threats": [
{
"category": "impact",
"details": "Different code base compared to affected products.",
"product_ids": [
"26",
"40",
"25",
"23",
"22",
"41",
"27"
]
}
],
"title": "CVE-2025-40946"
},
{
"cve": "CVE-2026-41125",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"flags": [
{
"label": "component_not_present",
"product_ids": [
"26",
"40",
"25",
"23",
"22",
"41",
"27"
]
}
],
"notes": [
{
"category": "description",
"text": "Improper neutralization of special elements used in an sql command (\u0027sql injection\u0027) in KACO Meteor server allows an authorized attacker to elevate privileges over a local network.",
"title": "CVE Description"
}
],
"product_status": {
"known_affected": [
"1",
"10",
"12",
"13",
"14",
"16",
"17",
"19",
"2",
"20",
"28",
"29",
"31",
"32",
"35",
"37",
"38",
"4",
"5",
"7",
"8",
"9"
],
"known_not_affected": [
"22",
"23",
"25",
"26",
"27",
"40",
"41"
]
},
"remediations": [
{
"category": "none_available",
"details": "Currently no fix is available",
"product_ids": [
"1",
"10",
"14",
"17",
"2",
"20",
"29",
"32",
"5",
"8"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.92 or later version",
"product_ids": [
"37"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V3.92 or later version",
"product_ids": [
"12",
"13",
"16",
"19",
"28",
"31",
"4",
"7",
"9"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V3.92 or later version",
"product_ids": [
"35"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
},
{
"category": "vendor_fix",
"details": "Update to V3.92 or later version",
"product_ids": [
"38"
],
"url": "https://kaco-newenergy.com/service/mykacocom-customer-portal"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"10",
"12",
"13",
"14",
"16",
"17",
"19",
"2",
"20",
"28",
"29",
"31",
"32",
"35",
"37",
"38",
"4",
"5",
"7",
"8",
"9"
]
}
],
"threats": [
{
"category": "impact",
"details": "Different code base compared to affected products.",
"product_ids": [
"26",
"40",
"25",
"23",
"22",
"41",
"27"
]
}
],
"title": "CVE-2026-41125"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.