Siemens KACO Blueplanet Inverters contain two vulnerabilities, including a hard-coded cryptographic key issue (CVE-2025-40946) that allows attackers to derive device credentials from serial numbers, and an SQL injection (CVE-2026-41125) in the KACO Meteor server enabling privilege escalation. Siemens has released firmware updates for select models and recommends network isolation for affected devices.
Siemens
4 posts
Siemens KACO Blueplanet Inverters (CVE-2025-40946, CVE-2026-41125) Cyber Centre Daily Advisory Digest — 2026-04-14 (3 advisories) The Canadian Centre for Cyber Security released a daily digest summarizing security advisories for Siemens control systems, Samsung mobile devices, and SAP enterprise software. Organizations are advised to review the respective vendor advisories and apply the necessary patches to mitigate potential vulnerabilities.
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure Iranian-affiliated APT actors are actively targeting internet-exposed programmable logic controllers (PLCs), specifically Rockwell Automation devices, across multiple U.S. critical infrastructure sectors. The attackers utilize native configuration software and Dropbear SSH to manipulate project files and HMI displays, leading to operational disruptions and financial losses.
Cyber Centre Daily Advisory Digest — 2026-03-27 (4 advisories) The Canadian Centre for Cyber Security released a daily digest highlighting recent security advisories from WatchGuard, Siemens, FreeBSD, and Ericsson. The advisories cover critical vulnerabilities including remote code execution, denial of service, and insecure deserialization across various operating systems, network appliances, and control system products.
