{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-41125","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","state":"PUBLISHED","assignerShortName":"siemens","dateReserved":"2026-04-17T11:25:13.214Z","datePublished":"2026-05-12T08:21:16.957Z","dateUpdated":"2026-10-13T09:18:25.426Z"},"containers":{"cna":{"providerMetadata":{"orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","shortName":"siemens","dateUpdated":"2026-10-13T09:18:25.426Z"},"descriptions":[{"lang":"en","value":"A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), blueplanet 105 TL3 GEN2 (All versions), blueplanet 110 TL3 (All versions < V3.92), blueplanet 125 NX3 M10 (All versions), blueplanet 125 TL3 (All versions < V3.92), blueplanet 125 TL3 GEN2 (All versions), blueplanet 137 TL3 (All versions < V3.92), blueplanet 150 TL3 (All versions < V3.92), blueplanet 150 TL3 GEN2 (All versions), blueplanet 155 TL3 (All versions < V3.92), blueplanet 155 TL3 GEN2 (All versions), blueplanet 165 TL3 (All versions < V3.92), blueplanet 165 TL3 GEN2 (All versions), blueplanet 87.0 TL3 (All versions < V3.92), blueplanet 87.0 TL3 GEN2 (All versions), blueplanet 92.0 TL3 (All versions < V3.92), blueplanet 92.0 TL3 GEN2 (All versions), blueplanet gridsave 110 TL3-S (All versions < V3.92), blueplanet gridsave 137 TL3-S (All versions < V3.92), blueplanet gridsave 92.0 TL3-S (All versions < V3.92). Improper neutralization of special elements used in an sql command ('sql injection') in KACO Meteor server allows an authorized attacker to elevate privileges over a local network."}],"affected":[{"vendor":"Siemens","product":"blueplanet 100 NX3 M8","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 100 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 105 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 105 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 110 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 125 NX3 M10","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 125 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 125 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 137 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 150 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 150 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 155 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 155 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 165 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 165 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 25.0 NX3-33.0 NX3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 3.0 NX3-20.0 NX3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 3.0-5.0 NX1","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 360 NX3 M6","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 50.0 NX3-60.0 NX3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 87.0 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 87.0 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 92.0 TL3","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet 92.0 TL3 GEN2","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet gridsave 110 TL3-S","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet gridsave 137 TL3-S","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet gridsave 92.0 TL3-S","versions":[{"status":"affected","version":"0","lessThan":"V3.92","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet hybrid 10.0 TL3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"blueplanet hybrid 6.0 NH3-12.0 NH3","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H","baseScore":6,"baseSeverity":"MEDIUM"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":5.9,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-89","description":"CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-545643.html"}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-12T12:41:52.446857Z","id":"CVE-2026-41125","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-12T12:42:01.940Z"}}]}}