CVE-2026-58115

criticalPriorität · verfolgen · 0OT-Risiko · erhöhtEPSS 0.010 · 61. PerzentilDEEUNLUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.95% (61st) EPSS

CVSS 10 · critical

Is it mine?

24 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cisa_csaf_ot · ncsc_nl

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server. This could allow an unauthenticated remote attacker to create malicious flows through the HTTP interface in order to execute arbitrary code on the underlying server with maximum privileges.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)siemens_psirt
Update to V4.3.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109741799/
BehobenSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)cisa_csaf_ot
Update to V4.3.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109741799/
MitigationSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)siemens_psirt
Harden the Node-RED installation (see Node-RED User Guide)
MitigationSIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)cisa_csaf_ot
Harden the Node-RED installation (see Node-RED User Guide)

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 3.9 · Auswirkung 6

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · CISA US

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · NCSC-NL NL

v4.010criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:Hsecondary · ENISA EU

v4.010criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.09.1criticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-306USCWE-306USCWE-306USCWE-306US

betroffene Produkte (24)

Betroffene Produkte und Versionsbereiche.

SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) < V4.3.4.1 running Industrial OS with Node-RED installedalle Versionencisa_csaf_otUS
Siemens SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)≤ vers:intdot/<4.3.4.1cisa_csaf_otUS
Siemens SIMATIC IoT2050 Advanced0 → V4.3.4.1enisa_euvdEU
Siemens Desigo DXR2≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC3≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC4≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC5.E003≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC5.E24≤ vers:unknown/*ncsc_nlNL
Siemens Desigo PXC7≤ vers:unknown/*ncsc_nlNL
Siemens LOGO! Soft Comfort≤ vers:unknown/*ncsc_nlNL
Siemens Parasolid V38.0≤ vers:unknown/*ncsc_nlNL
Siemens Parasolid V38.1≤ vers:unknown/*ncsc_nlNL
Siemens RUGGEDCOM APE1808≤ vers:unknown/*ncsc_nlNL
Siemens SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2)≤ vers:unknown/*ncsc_nlNL
Siemens Siemens License Server (SLS)≤ vers:unknown/*ncsc_nlNL
Siemens Simcenter Femap≤ vers:unknown/*ncsc_nlNL
Siemens Simcenter Nastran≤ vers:unknown/*ncsc_nlNL
Siemens Siveillance Video V2023 R3≤ vers:unknown/*ncsc_nlNL
Siemens Siveillance Video V2024 R1≤ vers:unknown/*ncsc_nlNL
Siemens Siveillance Video V2025≤ vers:unknown/*ncsc_nlNL

20 von 24 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2026-0282Kwetsbaarheden verholpen in Siemens productenNL2026-08-11csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Desigo, Parasolid, RUGGEDCOM, SIMATIC, Siveillance en Solid Edge.
SSA-834709SSA-834709: Missing Authentication Vulnerability in Node-RED on SIMATIC IoT2050 Advanced with Industrial OS2026-08-11csaf · siemens_psirtDE
SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC IoT2050 Advanced and strongly recommends to update to the latest version.
ICSA-26-237-03Siemens SIMATIC IoT2050 Advanced2026-08-11icsa · cisa_csaf_otUS
SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC IoT2050 Advanced and strongly recommends to update to the latest version.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2026-08-11geändert 2026-10-23

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan