Siemens SIMATIC IoT2050 Advanced
SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC IoT2050 Advanced and strongly recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-58115US | —OT elevated | — | ||
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do no… | ||||
references
External citations — patches, advisories, analysis.
- SSA-834709: Missing Authentication Vulnerability in Node-RED on SIMATIC IoT2050 Advanced with Industrial OS - CSAF Versionself
- SSA-834709: Missing Authentication Vulnerability in Node-RED on SIMATIC IoT2050 Advanced with Industrial OS - HTML Versionself
- ICS Advisory ICSA-26-237-03 JSONself
- ICS Advisory ICSA-26-237-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- MitigationSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)
Harden the Node-RED installation (see Node-RED User Guide)
- FixedSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)
Update to V4.3.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109741799/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan