ICSA-26-111-11

icsaUScisa_csaf_ot

Siemens Industrial Edge Management

view advisory published 2026-04-14

Industrial Edge Management contains an authorization bypass vulnerability that could be exploited by an unauthenticated remote attacker to circumvent authentication and to access connected Industrial Edge Devices through the remote connection feature. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-33892US——
A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), I…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationIndustrial Edge Management Pro V1

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Management Pro V2

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Management Virtual

    Ensure network access to affected products is limited to trusted parties only

  • FixedIndustrial Edge Management Pro V1

    Update to V1.15.17 or later version

    https://iehub.eu1.edge.siemens.cloud/
  • FixedIndustrial Edge Management Pro V2

    Update to V2.1.1 or later version

    https://iehub.eu1.edge.siemens.cloud/
  • FixedIndustrial Edge Management Virtual

    Update to V2.8.0 or later version

    https://iehub.eu1.edge.siemens.cloud/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan