SSA-609469: Authorization Bypass Vulnerability in Industrial Edge Management
Industrial Edge Management contains an authorization bypass vulnerability that could be exploited by an unauthenticated remote attacker to circumvent authentication and to access connected Industrial Edge Devices through the remote connection feature. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33892US | — | — | ||
A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), I… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationIndustrial Edge Management Pro V1
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Management Pro V2
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Management Virtual
Ensure network access to affected products is limited to trusted parties only
- FixedIndustrial Edge Management Pro V1
Update to V1.15.17 or later version
https://iehub.eu1.edge.siemens.cloud/ - FixedIndustrial Edge Management Pro V2
Update to V2.1.1 or later version
https://iehub.eu1.edge.siemens.cloud/ - FixedIndustrial Edge Management Virtual
Update to V2.8.0 or later version
https://iehub.eu1.edge.siemens.cloud/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan