Siemens Capital Embedded AR Classic
The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-89208DE | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic - CSAF Versionself
- SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic - HTML Versionself
- ICS Advisory icsa-26-295-04 JSONself
- ICS Advisory icsa-26-295-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- No fix plannedCapital Embedded AR Classic 431-422
Currently no fix is planned
- FixedCapital Embedded AR Classic R20-11
Update to V2303 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan