ID
VAR-202509-4395
TITLE
Siemens Mobility Trainguard End-of-Train and Head-of-Train Weak Authentication Vulnerabilities
Trust: 0.6
DESCRIPTION
The Trainguard End-of-Train (EOT) is a next-generation train-end device used to connect onboard telemetry. The Trainguard Head-of-Train (HOT) is a head-of-train device. These devices communicate using the S-9152 standard. Siemens Mobility Trainguard End-of-Train and Head-of-Train devices have weak authentication vulnerabilities. This vulnerability stems from a lack of authentication in the device's communication protocol. An attacker could exploit this vulnerability to inject malicious commands, causing operational disruptions or brake failures.
Trust: 0.6
IOT TAXONOMY
| category: | ['IoT'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | trainguard end-of-train | scope: | - | version: | - | Trust: 0.6 |
| vendor: | siemens | model: | trainguard head-of-train | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2025-22526 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssb-065467.html | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-22526 |
LAST UPDATE DATE
2025-10-16T23:44:36.949000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-22526 | date: | 2025-09-25T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-22526 | date: | 2025-09-17T00:00:00 |