SSA-014678

csafDEsiemens_psirt

SSA-014678: Authorization Bypass Vulnerability in Industrial Edge Device Kit

Advisory ansehen veröffentlicht 2026-01-13

Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40805US——
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and im…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (84)

  • MitigationIndustrial Edge Device Kit - arm64 V1.10

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.11

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.12

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.13

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.14

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.15

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.16

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.17

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.18

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.19

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.20

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.21

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.22

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.23

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.24

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.25

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.5

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.6

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.7

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.8

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.9

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.10

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.11

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.12

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.13

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.14

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.15

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.16

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.17

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.18

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.19

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.20

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.21

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.22

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.23

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.24

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.25

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.5

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.6

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.7

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.8

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.9

    Ensure network access to affected products is limited to trusted parties only

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.10

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.11

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.12

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.13

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.14

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.15

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.16

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.17

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.18

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.19

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.20

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.21

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.22

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.23

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.5

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.6

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.7

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.8

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.9

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.10

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.11

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.12

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.13

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.14

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.15

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.16

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.17

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.18

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.19

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.20

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.21

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.22

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.23

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.5

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.6

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.7

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.8

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.9

    Currently no fix is planned

  • BehobenIndustrial Edge Device Kit - arm64 V1.24

    Update to V1.24.2 or later version

  • BehobenIndustrial Edge Device Kit - arm64 V1.25

    Update to V1.25.1 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.24

    Update to V1.24.2 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.25

    Update to V1.25.1 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan