CVE-2026-89207

mediumpriority · track · 26EPSS 0.004 · 37 %ileDEUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.43% (37th) EPSS

CVSS 6.5 · medium

Is it mine?

8 products

Check your exposure

Who says so?

2 sources

cisa_csaf_ot · siemens_psirt

EPSS · scored 2026-10-27

A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedWTV676-HB6035 Web Interfacesiemens_psirt
Update to V3.94 or later version
https://support.industry.siemens.com/cs/ww/en/view/109480838/
FixedWTV776-HB6035 Web Interfacesiemens_psirt
Update to V4.17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109480838/
FixedWTV676-HB6035 Web Interfacecisa_csaf_ot
Update to V3.94 or later version
https://support.industry.siemens.com/cs/ww/en/view/109480838/
FixedWTV776-HB6035 Web Interfacecisa_csaf_ot
Update to V4.17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109480838/

cvss

Technical severity, 0–10. One row per scoring source.

6.9

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.7–6.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Lprimary · productcert@siemens.com DEexploitability 3.9 · impact 2.5

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Lsecondary · CISA US

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Lsecondary · Siemens ProductCERT DE

v4.06.9mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.02.7lowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1287USCWE-1287USCWE-1287US

affected products (8)

Products and version ranges known to be affected.

WTV676-HB6035 Web Interface < V3.94all versionscisa_csaf_otUS
WTV776-HB6035 Web Interface < V4.17all versionscisa_csaf_otUS
Siemens WTV676-HB6035 Web Interface≤ vers:intdot/<3.94cisa_csaf_otUS
Siemens WTV776-HB6035 Web Interface≤ vers:intdot/<4.17cisa_csaf_otUS
Siemens WTV676-HB6035 Web Interface≤ vers:intdot/<3.94siemens_psirtDE
Siemens WTV676-HB6035 Web Interface < V3.94≤ vers:intdot/<3.94siemens_psirtDE
Siemens WTV776-HB6035 Web Interface≤ vers:intdot/<4.17siemens_psirtDE
Siemens WTV776-HB6035 Web Interface < V4.17≤ vers:intdot/<4.17siemens_psirtDE

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-823812SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices2026-09-16csaf · siemens_psirtDE
The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-26-265-08Siemens WTV676 and WTV7762026-09-16icsa · cisa_csaf_otUS
The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices. Siemens has released new versions for the affected products and recommends to update to the latest versions.

sources

Which sources assert this record, and when.

cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2026-09-16modified 2026-09-18

references (1) nvd

External citations — patches, advisories, analysis.

https://cert-portal.siemens.com/productcert/html/ssa-823812.html

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan