SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44415DE | critical9.1 | — | ||
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal… | ||||
| CVE-2026-44414DE | medium6.8 | — | ||
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Devi… | ||||
references
External citations — patches, advisories, analysis.
remediations (132)
- MitigationIndustrial Edge Cloud Device (IECD)
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Own Device (IEOD)
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Virtual Device (IEVD)
Ensure network access to affected products is limited to trusted parties only
- MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSCALANCE LPE9433 (6GK5998-3GS11-2AC2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-21A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-39A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-59A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC127E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC227E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC227G Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC427E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC847E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)
Ensure network access to affected products is limited to trusted parties only
- No fix availableSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Currently no fix is available
- No fix availableSCALANCE LPE9433 (6GK5998-3GS11-2AC2)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)
Currently no fix is available
- No fix availableSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)
Currently no fix is available
- No fix availableSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1)
Currently no fix is available
- No fix availableSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)
Currently no fix is available
- No fix availableSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)
Currently no fix is available
- No fix availableSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)
Currently no fix is available
- FixedIndustrial Edge Cloud Device (IECD)
Update to V1.28.1 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes - FixedIndustrial Edge Own Device (IEOD)
Update to V1.28.1 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-own-device/release-notes - FixedIndustrial Edge Virtual Device (IEVD)
Update to V1.28.1 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes - FixedSIMATIC IPC BX-21A Industrial Edge Device
Update to V1.28.1-2 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-ipc-industrial-edge-device/all-release-notes/release-notes-v1.28 - FixedSIMATIC IPC BX-39A Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IPC BX-59A Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IPC127E Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IPC227E Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IPC227G Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IPC427E Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IPC847E Industrial Edge Device
Update to V3.2.0-17 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2 - FixedSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)
Update to V1.28.1-2 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28 - FixedSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)
Update to V1.28.1-2 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan