ID
VAR-202505-1588
CVE
CVE-2025-26390
TITLE
Siemens' OZW672 firmware and OZW772 in the firmware SQL Injection vulnerability
Trust: 0.8
DESCRIPTION
A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user. Siemens' OZW672 firmware and OZW772 The firmware has SQL There is an injection vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. OZW devices (web servers) are used to remotely monitor building controller devices, for example for monitoring heating controls or air conditioning conditions. Siemens OZW672 and OZW772 web servers have code execution and SQL injection vulnerabilities that can be exploited by an attacker to execute arbitrary code on the device with root privileges (in versions prior to V8.0) or authenticate as an administrator user (in versions prior to V6.0)
Trust: 2.16
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | ozw772 | scope: | lt | version: | 6.0 | Trust: 1.6 |
| vendor: | siemens | model: | ozw672 | scope: | lt | version: | 6.0 | Trust: 1.0 |
| vendor: | シーメンス | model: | ozw772 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シーメンス | model: | ozw672 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | siemens | model: | ozw672 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | siemens | model: | ozw772 | scope: | lt | version: | 8.0 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-89 | Trust: 1.0 |
| problemtype: | SQL injection (CWE-89) [ others ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-26390 | Trust: 3.2 |
| db: | SIEMENS | id: | SSA-047424 | Trust: 2.4 |
| db: | ICS CERT | id: | ICSA-25-135-10 | Trust: 0.8 |
| db: | JVN | id: | JVNVU92528757 | Trust: 0.8 |
| db: | JVNDB | id: | JVNDB-2025-015585 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-10580 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-047424.html | Trust: 2.4 |
| url: | https://jvn.jp/vu/jvnvu92528757/ | Trust: 0.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-26390 | Trust: 0.8 |
| url: | https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-10 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-10580 |
| db: | JVNDB | id: | JVNDB-2025-015585 |
| db: | NVD | id: | CVE-2025-26390 |
LAST UPDATE DATE
2025-10-12T22:21:35.824000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-10580 | date: | 2025-05-23T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-015585 | date: | 2025-10-09T08:39:00 |
| db: | NVD | id: | CVE-2025-26390 | date: | 2025-10-03T20:46:58.210 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-10580 | date: | 2025-05-13T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-015585 | date: | 2025-10-09T00:00:00 |
| db: | NVD | id: | CVE-2025-26390 | date: | 2025-05-13T10:15:23.703 |