ICSA-26-111-11

icsaUScisa_csaf_ot

Siemens Industrial Edge Management

Advisory ansehen veröffentlicht 2026-04-14

Industrial Edge Management contains an authorization bypass vulnerability that could be exploited by an unauthenticated remote attacker to circumvent authentication and to access connected Industrial Edge Devices through the remote connection feature. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-33892US——
A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), I…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationIndustrial Edge Management Pro V1

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Management Pro V2

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Management Virtual

    Ensure network access to affected products is limited to trusted parties only

  • BehobenIndustrial Edge Management Pro V1

    Update to V1.15.17 or later version

    https://iehub.eu1.edge.siemens.cloud/
  • BehobenIndustrial Edge Management Pro V2

    Update to V2.1.1 or later version

    https://iehub.eu1.edge.siemens.cloud/
  • BehobenIndustrial Edge Management Virtual

    Update to V2.8.0 or later version

    https://iehub.eu1.edge.siemens.cloud/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan