SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic
The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-89208DE | medium5.3 | — | ||
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationCapital Embedded AR Classic 431-422
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- MitigationCapital Embedded AR Classic R20-11
Apply network segmentation and put the ECUs behind properly configured gateways/firewalls
- Kein Fix geplantCapital Embedded AR Classic 431-422
Currently no fix is planned
- BehobenCapital Embedded AR Classic R20-11
Update to V2303 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan