Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40805US | — | — | ||
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and im… | ||||
references
External citations — patches, advisories, analysis.
- SSA-014678: Authorization Bypass Vulnerability in Industrial Edge Device Kit - CSAF Versionself
- SSA-014678: Authorization Bypass Vulnerability in Industrial Edge Device Kit - HTML Versionself
- ICS Advisory ICSA-26-015-09 JSONself
- ICS Advisory ICSA-26-015-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (84)
- MitigationIndustrial Edge Device Kit - arm64 V1.10
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.11
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.12
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.13
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.14
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.15
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.16
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.17
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.18
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.19
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.20
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.21
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.22
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.23
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.24
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.25
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.5
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.6
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.7
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.8
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.9
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.10
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.11
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.12
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.13
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.14
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.15
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.16
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.17
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.18
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.19
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.20
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.21
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.22
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.23
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.24
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.25
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.5
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.6
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.7
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.8
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.9
Ensure network access to affected products is limited to trusted parties only
- No fix plannedIndustrial Edge Device Kit - arm64 V1.10
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.11
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.12
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.13
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.14
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.15
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.16
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.17
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.18
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.19
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.20
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.21
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.22
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.23
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.5
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.6
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.7
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.8
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.9
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.10
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.11
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.12
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.13
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.14
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.15
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.16
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.17
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.18
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.19
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.20
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.21
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.22
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.23
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.5
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.6
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.7
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.8
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.9
Currently no fix is planned
- FixedIndustrial Edge Device Kit - arm64 V1.24
Update to V1.24.2 or later version
- FixedIndustrial Edge Device Kit - arm64 V1.25
Update to V1.25.1 or later version
- FixedIndustrial Edge Device Kit - x86-64 V1.24
Update to V1.24.2 or later version
- FixedIndustrial Edge Device Kit - x86-64 V1.25
Update to V1.25.1 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan