CVE-2026-44414

mediumPriorität · verfolgen · 27EPSS 0.005 · 38. PerzentilDEFRNLUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.45% (38th) EPSS
CVSS 6.8 · medium
Is it mine?
380 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cisa_csaf_ot · ncsc_nl · siemens_psirt · certfr

EPSS · bewertet 2026-10-22

A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edge Device Kit - arm64 V1.15, Industrial Edge Device Kit - arm64 V1.16, Industrial Edge Device Kit - arm64 V1.17, Industrial Edge Device Kit - arm64 V1.18, Industrial Edge Device Kit - arm64 V1.19, Industrial Edge Device Kit - arm64 V1.20, Industrial Edge Device Kit - arm64 V1.21, Industrial Edge Device Kit - arm64 V1.22, Industrial Edge Device Kit - arm64 V1.23, Industrial Edge Device Kit - arm64 V1.24, Industrial Edge Device Kit - arm64 V1.25, Industrial Edge Device Kit - arm64 V1.26, Industrial Edge Device Kit - arm64 V1.27, Industrial Edge Device Kit - arm64 V1.28, Industrial Edge Device Kit - arm64 V1.5, Industrial Edge Device Kit - arm64 V1.6, Industrial Edge Device Kit - arm64 V1.7, Industrial Edge Device Kit - arm64 V1.8, Industrial Edge Device Kit - arm64 V1.9, Industrial Edge Device Kit - x86-64 V1.10, Industrial Edge Device Kit - x86-64 V1.11, Industrial Edge Device Kit - x86-64 V1.12, Industrial Edge Device Kit - x86-64 V1.13, Industrial Edge Device Kit - x86-64 V1.14, Industrial Edge Device Kit - x86-64 V1.15, Industrial Edge Device Kit - x86-64 V1.16, Industrial Edge Device Kit - x86-64 V1.17, Industrial Edge Device Kit - x86-64 V1.18, Industrial Edge Device Kit - x86-64 V1.19, Industrial Edge Device Kit - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Device Kit - x86-64 V1.22, Industrial Edge Device Kit - x86-64 V1.23, Industrial Edge Device Kit - x86-64 V1.24, Industrial Edge Device Kit - x86-64 V1.25, Industrial Edge Device Kit - x86-64 V1.26, Industrial Edge Device Kit - x86-64 V1.27, Industrial Edge Device Kit - x86-64 V1.28, Industrial Edge Device Kit - x86-64 V1.5, Industrial Edge Device Kit - x86-64 V1.6, Industrial Edge Device Kit - x86-64 V1.7, Industrial Edge Device Kit - x86-64 V1.8, Industrial Edge Device Kit - x86-64 V1.9, Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413 (6GK5998-3GS01-2AC2), SCALANCE LPE9433 (6GK5998-3GS11-2AC2), SIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2), SIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2), SIMATIC IPC BX-21A Industrial Edge Device, SIMATIC IPC BX-39A Industrial Edge Device, SIMATIC IPC BX-59A Industrial Edge Device, SIMATIC IPC127E Industrial Edge Device, SIMATIC IPC227E Industrial Edge Device, SIMATIC IPC227G Industrial Edge Device, SIMATIC IPC427E Industrial Edge Device, SIMATIC IPC847E Industrial Edge Device. Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenIndustrial Edge Device Kit - arm64 V1.26siemens_psirt

    Update to V1.26.2-1 or later version

  • BehobenIndustrial Edge Device Kit - arm64 V1.27siemens_psirt

    Update to V1.27.1-1 or later version

  • BehobenIndustrial Edge Device Kit - arm64 V1.28siemens_psirt

    Update to V1.28.0-6 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.26siemens_psirt

    Update to V1.26.2-1 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.27siemens_psirt

    Update to V1.27.1-1 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.28siemens_psirt

    Update to V1.28.0-6 or later version

  • BehobenIndustrial Edge Cloud Device (IECD)siemens_psirt

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • BehobenIndustrial Edge Own Device (IEOD)siemens_psirt

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-own-device/release-notes
  • BehobenIndustrial Edge Virtual Device (IEVD)siemens_psirt

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • BehobenSIMATIC IPC BX-21A Industrial Edge Devicesiemens_psirt

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-ipc-industrial-edge-device/all-release-notes/release-notes-v1.28
  • BehobenSIMATIC IPC BX-39A Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC BX-59A Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC127E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC227E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC227G Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC427E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC847E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)siemens_psirt

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • BehobenSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)siemens_psirt

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • BehobenIndustrial Edge Device Kit - arm64 V1.26cisa_csaf_ot

    Update to V1.26.2-1 or later version

  • BehobenIndustrial Edge Device Kit - arm64 V1.27cisa_csaf_ot

    Update to V1.27.1-1 or later version

  • BehobenIndustrial Edge Device Kit - arm64 V1.28cisa_csaf_ot

    Update to V1.28.0-6 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.26cisa_csaf_ot

    Update to V1.26.2-1 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.27cisa_csaf_ot

    Update to V1.27.1-1 or later version

  • BehobenIndustrial Edge Device Kit - x86-64 V1.28cisa_csaf_ot

    Update to V1.28.0-6 or later version

  • BehobenIndustrial Edge Cloud Device (IECD)cisa_csaf_ot

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • BehobenIndustrial Edge Own Device (IEOD)cisa_csaf_ot

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-own-device/release-notes
  • BehobenIndustrial Edge Virtual Device (IEVD)cisa_csaf_ot

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • BehobenSIMATIC IPC BX-21A Industrial Edge Devicecisa_csaf_ot

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-ipc-industrial-edge-device/all-release-notes/release-notes-v1.28
  • BehobenSIMATIC IPC BX-39A Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC BX-59A Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC127E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC227E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC227G Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC427E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IPC847E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • BehobenSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)cisa_csaf_ot

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • BehobenSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)cisa_csaf_ot

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • MitigationIndustrial Edge Device Kit - arm64 V1.10siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.11siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.12siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.13siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.14siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.15siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.16siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.17siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.18siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.19siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.20siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.21siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.22siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.23siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.24siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.25siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.26siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.27siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.28siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.5siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.6siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.7siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.8siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.9siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.10siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.11siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.12siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.13siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.14siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.15siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.16siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.17siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.18siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.19siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.20siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.21siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.22siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.23siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.24siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.25siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.26siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.27siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.28siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.5siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.6siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.7siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.8siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.9siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Cloud Device (IECD)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Own Device (IEOD)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Virtual Device (IEVD)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9433 (6GK5998-3GS11-2AC2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-21A Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-39A Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-59A Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC127E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227G Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC427E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC847E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.10cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.11cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.12cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.13cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.14cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.15cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.16cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.17cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.18cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.19cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.20cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.21cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.22cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.23cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.24cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.25cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.26cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.27cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.28cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.5cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.6cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.7cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.8cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.9cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.10cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.11cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.12cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.13cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.14cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.15cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.16cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.17cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.18cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.19cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.20cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.21cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.22cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.23cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.24cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.25cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.26cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.27cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.28cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.5cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.6cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.7cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.8cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.9cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Cloud Device (IECD)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Own Device (IEOD)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Virtual Device (IEVD)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9433 (6GK5998-3GS11-2AC2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-21A Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-39A Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-59A Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC127E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227G Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC427E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC847E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • Kein Fix verfügbarSCALANCE LPE9413 (6GK5998-3GS01-2AC2)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSCALANCE LPE9433 (6GK5998-3GS11-2AC2)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSCALANCE LPE9413 (6GK5998-3GS01-2AC2)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSCALANCE LPE9433 (6GK5998-3GS11-2AC2)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.10siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.11siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.12siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.13siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.14siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.15siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.16siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.17siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.18siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.19siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.20siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.21siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.22siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.23siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.24siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.25siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.5siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.6siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.7siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.8siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.9siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.10siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.11siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.12siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.13siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.14siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.15siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.16siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.17siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.18siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.19siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.20siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.21siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.22siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.23siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.24siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.25siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.5siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.6siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.7siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.8siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.9siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.10cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.11cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.12cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.13cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.14cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.15cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.16cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.17cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.18cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.19cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.20cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.21cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.22cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.23cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.24cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.25cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.5cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.6cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.7cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.8cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.9cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.10cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.11cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.12cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.13cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.14cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.15cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.16cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.17cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.18cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.19cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.20cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.21cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.22cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.23cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.24cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.25cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.5cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.6cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.7cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.8cisa_csaf_ot

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.9cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.9
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.6–6.9

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nprimary · productcert@siemens.com DEAusnutzbarkeit 2.3 · Auswirkung 4
v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · CISA US
v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · Siemens ProductCERT DE
v4.06.9mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.03.6lowCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

05

betroffene Produkte (380)

Betroffene Produkte und Versionsbereiche.

20 von 380 angezeigt
06

Advisories (6)

Hersteller- und Ökosystem-Meldungen dazu.

  • NCSC-2026-0415Kwetsbaarheden verholpen in Siemens-productenNL2026-10-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Desigo, Industrial Plus, RUGGEDCOM, SIMATIC en SIPLUS.

  • SSA-377139SSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device Kit2026-10-13csaf · siemens_psirtDE

    Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

  • SSA-832641SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge Devices2026-10-13csaf · siemens_psirtDE

    Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.

  • ICSA-26-295-09Siemens Industrial Edge Device Kit2026-10-13icsa · cisa_csaf_otUS

    Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

  • ICSA-26-295-17Siemens Industrial Edge Devices2026-10-13icsa · cisa_csaf_otUS

    Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.

  • CERTFR-2026-AVI-1298Multiples vulnérabilités dans les produits SiemensFrançais2026-10-13vendor · certfrFR
07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2026-10-13geändert 2026-10-15
08

Referenzen (2) nvd

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan