CVE-2026-44414

mediumpriority · track · 27EPSS 0.005 · 38 %ileDEFRNLUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.45% (38th) EPSS
CVSS 6.8 · medium
Is it mine?
380 products
Check your exposure
Who says so?
4 sources
cisa_csaf_ot · ncsc_nl · siemens_psirt · certfr

EPSS · scored 2026-10-22

A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edge Device Kit - arm64 V1.15, Industrial Edge Device Kit - arm64 V1.16, Industrial Edge Device Kit - arm64 V1.17, Industrial Edge Device Kit - arm64 V1.18, Industrial Edge Device Kit - arm64 V1.19, Industrial Edge Device Kit - arm64 V1.20, Industrial Edge Device Kit - arm64 V1.21, Industrial Edge Device Kit - arm64 V1.22, Industrial Edge Device Kit - arm64 V1.23, Industrial Edge Device Kit - arm64 V1.24, Industrial Edge Device Kit - arm64 V1.25, Industrial Edge Device Kit - arm64 V1.26, Industrial Edge Device Kit - arm64 V1.27, Industrial Edge Device Kit - arm64 V1.28, Industrial Edge Device Kit - arm64 V1.5, Industrial Edge Device Kit - arm64 V1.6, Industrial Edge Device Kit - arm64 V1.7, Industrial Edge Device Kit - arm64 V1.8, Industrial Edge Device Kit - arm64 V1.9, Industrial Edge Device Kit - x86-64 V1.10, Industrial Edge Device Kit - x86-64 V1.11, Industrial Edge Device Kit - x86-64 V1.12, Industrial Edge Device Kit - x86-64 V1.13, Industrial Edge Device Kit - x86-64 V1.14, Industrial Edge Device Kit - x86-64 V1.15, Industrial Edge Device Kit - x86-64 V1.16, Industrial Edge Device Kit - x86-64 V1.17, Industrial Edge Device Kit - x86-64 V1.18, Industrial Edge Device Kit - x86-64 V1.19, Industrial Edge Device Kit - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Device Kit - x86-64 V1.22, Industrial Edge Device Kit - x86-64 V1.23, Industrial Edge Device Kit - x86-64 V1.24, Industrial Edge Device Kit - x86-64 V1.25, Industrial Edge Device Kit - x86-64 V1.26, Industrial Edge Device Kit - x86-64 V1.27, Industrial Edge Device Kit - x86-64 V1.28, Industrial Edge Device Kit - x86-64 V1.5, Industrial Edge Device Kit - x86-64 V1.6, Industrial Edge Device Kit - x86-64 V1.7, Industrial Edge Device Kit - x86-64 V1.8, Industrial Edge Device Kit - x86-64 V1.9, Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413 (6GK5998-3GS01-2AC2), SCALANCE LPE9433 (6GK5998-3GS11-2AC2), SIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2), SIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2), SIMATIC IPC BX-21A Industrial Edge Device, SIMATIC IPC BX-39A Industrial Edge Device, SIMATIC IPC BX-59A Industrial Edge Device, SIMATIC IPC127E Industrial Edge Device, SIMATIC IPC227E Industrial Edge Device, SIMATIC IPC227G Industrial Edge Device, SIMATIC IPC427E Industrial Edge Device, SIMATIC IPC847E Industrial Edge Device. Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedIndustrial Edge Device Kit - arm64 V1.26siemens_psirt

    Update to V1.26.2-1 or later version

  • FixedIndustrial Edge Device Kit - arm64 V1.27siemens_psirt

    Update to V1.27.1-1 or later version

  • FixedIndustrial Edge Device Kit - arm64 V1.28siemens_psirt

    Update to V1.28.0-6 or later version

  • FixedIndustrial Edge Device Kit - x86-64 V1.26siemens_psirt

    Update to V1.26.2-1 or later version

  • FixedIndustrial Edge Device Kit - x86-64 V1.27siemens_psirt

    Update to V1.27.1-1 or later version

  • FixedIndustrial Edge Device Kit - x86-64 V1.28siemens_psirt

    Update to V1.28.0-6 or later version

  • FixedIndustrial Edge Cloud Device (IECD)siemens_psirt

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • FixedIndustrial Edge Own Device (IEOD)siemens_psirt

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-own-device/release-notes
  • FixedIndustrial Edge Virtual Device (IEVD)siemens_psirt

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • FixedSIMATIC IPC BX-21A Industrial Edge Devicesiemens_psirt

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-ipc-industrial-edge-device/all-release-notes/release-notes-v1.28
  • FixedSIMATIC IPC BX-39A Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC BX-59A Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC127E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC227E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC227G Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC427E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC847E Industrial Edge Devicesiemens_psirt

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)siemens_psirt

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • FixedSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)siemens_psirt

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • FixedIndustrial Edge Device Kit - arm64 V1.26cisa_csaf_ot

    Update to V1.26.2-1 or later version

  • FixedIndustrial Edge Device Kit - arm64 V1.27cisa_csaf_ot

    Update to V1.27.1-1 or later version

  • FixedIndustrial Edge Device Kit - arm64 V1.28cisa_csaf_ot

    Update to V1.28.0-6 or later version

  • FixedIndustrial Edge Device Kit - x86-64 V1.26cisa_csaf_ot

    Update to V1.26.2-1 or later version

  • FixedIndustrial Edge Device Kit - x86-64 V1.27cisa_csaf_ot

    Update to V1.27.1-1 or later version

  • FixedIndustrial Edge Device Kit - x86-64 V1.28cisa_csaf_ot

    Update to V1.28.0-6 or later version

  • FixedIndustrial Edge Cloud Device (IECD)cisa_csaf_ot

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • FixedIndustrial Edge Own Device (IEOD)cisa_csaf_ot

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-own-device/release-notes
  • FixedIndustrial Edge Virtual Device (IEVD)cisa_csaf_ot

    Update to V1.28.1 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28.1/industrial-edge-virtual/cloud-device/release-notes
  • FixedSIMATIC IPC BX-21A Industrial Edge Devicecisa_csaf_ot

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-ipc-industrial-edge-device/all-release-notes/release-notes-v1.28
  • FixedSIMATIC IPC BX-39A Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC BX-59A Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC127E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC227E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC227G Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC427E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IPC847E Industrial Edge Devicecisa_csaf_ot

    Update to V3.2.0-17 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.2/simatic-ipc-ied-os/all-release-notes/release-notes-v3.2
  • FixedSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)cisa_csaf_ot

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • FixedSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)cisa_csaf_ot

    Update to V1.28.1-2 or later version

    https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.28/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.28
  • MitigationIndustrial Edge Device Kit - arm64 V1.10siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.11siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.12siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.13siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.14siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.15siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.16siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.17siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.18siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.19siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.20siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.21siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.22siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.23siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.24siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.25siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.26siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.27siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.28siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.5siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.6siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.7siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.8siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.9siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.10siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.11siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.12siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.13siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.14siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.15siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.16siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.17siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.18siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.19siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.20siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.21siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.22siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.23siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.24siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.25siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.26siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.27siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.28siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.5siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.6siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.7siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.8siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.9siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Cloud Device (IECD)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Own Device (IEOD)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Virtual Device (IEVD)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9433 (6GK5998-3GS11-2AC2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-21A Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-39A Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-59A Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC127E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227G Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC427E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC847E Industrial Edge Devicesiemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)siemens_psirt

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.10cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.11cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.12cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.13cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.14cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.15cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.16cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.17cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.18cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.19cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.20cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.21cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.22cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.23cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.24cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.25cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.26cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.27cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.28cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.5cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.6cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.7cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.8cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - arm64 V1.9cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.10cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.11cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.12cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.13cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.14cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.15cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.16cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.17cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.18cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.19cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.20cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.21cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.22cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.23cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.24cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.25cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.26cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.27cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.28cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.5cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.6cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.7cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.8cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Device Kit - x86-64 V1.9cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Cloud Device (IECD)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Own Device (IEOD)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationIndustrial Edge Virtual Device (IEVD)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSCALANCE LPE9433 (6GK5998-3GS11-2AC2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-21A Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-39A Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC BX-59A Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC127E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC227G Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC427E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IPC847E Industrial Edge Devicecisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • MitigationSIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2)cisa_csaf_ot

    Ensure network access to affected products is limited to trusted parties only

  • No fix availableSCALANCE LPE9413 (6GK5998-3GS01-2AC2)siemens_psirt

    Currently no fix is available

  • No fix availableSCALANCE LPE9433 (6GK5998-3GS11-2AC2)siemens_psirt

    Currently no fix is available

  • No fix availableSCALANCE LPE9413 (6GK5998-3GS01-2AC2)cisa_csaf_ot

    Currently no fix is available

  • No fix availableSCALANCE LPE9433 (6GK5998-3GS11-2AC2)cisa_csaf_ot

    Currently no fix is available

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.10siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.11siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.12siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.13siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.14siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.15siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.16siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.17siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.18siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.19siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.20siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.21siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.22siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.23siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.24siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.25siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.5siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.6siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.7siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.8siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.9siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.10siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.11siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.12siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.13siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.14siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.15siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.16siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.17siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.18siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.19siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.20siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.21siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.22siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.23siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.24siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.25siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.5siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.6siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.7siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.8siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.9siemens_psirt

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.10cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.11cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.12cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.13cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.14cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.15cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.17cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.18cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.19cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.20cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.21cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.22cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.23cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.24cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.25cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.5cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.6cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.7cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.8cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - arm64 V1.9cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.10cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.11cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.12cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.13cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.14cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.15cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.16cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.17cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.18cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.19cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.20cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.21cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.22cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.23cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.24cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.25cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.5cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.6cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.7cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.8cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedIndustrial Edge Device Kit - x86-64 V1.9cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

6.9
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.6–6.9

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nprimary · productcert@siemens.com DEexploitability 2.3 · impact 4
v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · CISA US
v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:Nsecondary · Siemens ProductCERT DE
v4.06.9mediumCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE
v4.03.6lowCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-35USCWE-35USCWE-35US
05

affected products (380)

Products and version ranges known to be affected.

showing 20 of 380
06

advisories (6)

Vendor and ecosystem advisories describing this.

  • NCSC-2026-0415Kwetsbaarheden verholpen in Siemens-productenNL2026-10-13csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Desigo, Industrial Plus, RUGGEDCOM, SIMATIC en SIPLUS.

  • SSA-377139SSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device Kit2026-10-13csaf · siemens_psirtDE

    Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

  • SSA-832641SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge Devices2026-10-13csaf · siemens_psirtDE

    Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.

  • ICSA-26-295-09Siemens Industrial Edge Device Kit2026-10-13icsa · cisa_csaf_otUS

    Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

  • ICSA-26-295-17Siemens Industrial Edge Devices2026-10-13icsa · cisa_csaf_otUS

    Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.

  • CERTFR-2026-AVI-1298Multiples vulnérabilités dans les produits SiemensFrançais2026-10-13vendor · certfrFR
07

sources

Which sources assert this record, and when.

cisa_csaf_otncsc_nlsiemens_psirtcertfrNVDCVE.orgMITRE
published 2026-10-13modified 2026-10-15
08

references (2) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan