ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
11–20 of 23 articles
Best match · title matches first
Dark Reading
Canada's largest bookseller rejected the pressure of the ransomware gang's countdown timer, despite data threats.
CISA advisories
View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Mendix SAML Module are affected: Mendix SAML (Mendix 10 compatible) vers:intdot/<4.2.4 (CVE-2026-89209) Mendix SAML (Mendix 11 compatible) vers:intdot/<4.2.4 (CVE-2026-89209) Mendix SAML (Mendix 9 compatible) vers:intdot/<3.6.29 (CVE-2026-89209) CVSS Vendor Equipment v3 6.8 Siemens Mendix SAML (Mendix 10 compatible) 1 Vulnerability Authentication Bypass by Capture-replay Background Critical Infrastructure Sectors: Critical Manufacturing, Information Technology Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2026-89209 Affected versions of the module do not properly protect against SAML assertion replay in IdP-initiated authentication flows. This could allow unauthenticated remote attackers to gain unauthorized access to the application by replaying a valid SAML response. Read More 3 Affected Products Mendix SAML (Mendix 10 compatible) < V4.2.4 Product Status: known_affected Remediations MitigationDisable IdP-initiated SSO Vendor fixUpdate to V4.2.4 or later version Mendix SAML (Mendix 11 compatible) < V4.2.4 Product Status: known_affected Remediations MitigationDisable IdP-initiated SSO Vendor fixUpdate to V4.2.4 or later version Mendix SAML (Mendix 9 compatible) < V3.6.29 Product Status: known_affected Remediations MitigationDisable IdP-initiated SSO Vendor fixUpdate to V3.6.29 or later version Additional Metrics Relevant CWE: CWE-294 Authentication Bypass by Capture-replay CVSS Version Base Score Base Severity Vector String 3.1 6.8 MEDIUM CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N View CVE Details Acknowledgments Siemens ProductCERT reported this vulnerability to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-137528 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-26 Date Revision Summary 2026-10-26 1 Publication Date 2026-10-29 2 Initial CISA Republication of Siemens ProductCERT SSA-137528 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-established to restore normal operation. The following versions of Siemens SENTRON 3NA COM Fuse are affected: SENTRON 3NA COM Fuse vers:intdot/<5.2 (CVE-2024-7322) CVSS Vendor Equipment v3 5.8 Siemens SENTRON 3NA COM Fuse 1 Vulnerability Improper Verification of Source of a Communication Channel Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2024-7322 A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change in node ID causes Denial of Service (DoS). To recover from this DoS, the network must be re-established Read More 1 Affected Product SENTRON 3NA COM Fuse < V5.2 Product Status: known_affected Remediations Vendor fixUpdate to V5.2 or later version Additional Metrics Relevant CWE: CWE-940 Improper Verification of Source of a Communication Channel CVSS Version Base Score Base Severity Vector String 3.1 5.8 MEDIUM CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H View CVE Details Acknowledgments Siemens ProductCERT reported this vulnerability to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-099819 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-099819 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends mitigations for products where fixes are not or not yet available. The following versions of Siemens WinCC are affected: SIMATIC WinCC V7.5 vers:all/* (CVE-2026-59241) SIMATIC WinCC V8.0 vers:intdot/<8.0.0.11 (CVE-2026-59241) SIMATIC WinCC V8.1 vers:intdot/<8.1.7 (CVE-2026-59241) CVSS Vendor Equipment v3 8.8 Siemens SIMATIC WinCC V7.5 1 Vulnerability Incorrect Privilege Assignment Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2026-59241 The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an authenticated remote attacker with database access to escalate privileges and execute arbitrary commands on the host system where SIMATIC WinCC is installed, potentially leading to a compromise of the system. Read More 3 Affected Products SIMATIC WinCC V7.5 Product Status: known_affected Remediations None availableCurrently no fix is available SIMATIC WinCC V8.0 < V8.0 Update 11 Product Status: known_affected Remediations Vendor fixUpdate to V8.0 Update 11 or later version SIMATIC WinCC V8.1 < V8.1 Update 7 Product Status: known_affected Remediations Vendor fixUpdate to V8.1 Update 7 or later version Additional Metrics Relevant CWE: CWE-266 Incorrect Privilege Assignment CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details Acknowledgments Siemens ProductCERT reported this vulnerability to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-550198 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-550198 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens Industrial Edge Device Kit are affected: Industrial Edge Device Kit - arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - arm64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415) Industrial Edge Device Kit - x86-64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415) CVSS Vendor Equipment v3 9.1 Siemens Industrial Edge Device Kit - arm64 V1.10 1 Vulnerability Path Traversal: '.../...//' Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-44414 Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system. Read More 48 Affected Products Industrial Edge Device Kit - arm64 V1.10 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.19 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.20 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.21 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.22 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.23 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.24 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.25 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.26 < V1.26.2-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.26.2-1 or later version Industrial Edge Device Kit - arm64 V1.27 < V1.27.1-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.27.1-1 or later version Industrial Edge Device Kit - arm64 V1.28 < V1.28.0-6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.28.0-6 or later version Industrial Edge Device Kit - arm64 V1.11 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.5 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.7 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.8 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.9 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.10 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.11 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.12 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.13 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.14 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.12 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.15 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.16 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.17 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.18 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.19 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.20 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.21 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.22 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.23 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.24 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.13 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.25 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.26 < V1.26.2-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.26.2-1 or later version Industrial Edge Device Kit - x86-64 V1.27 < V1.27.1-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.27.1-1 or later version Industrial Edge Device Kit - x86-64 V1.28 < V1.28.0-6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.28.0-6 or later version Industrial Edge Device Kit - x86-64 V1.5 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.7 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.8 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.9 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.14 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.15 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.16 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.17 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.18 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Additional Metrics Relevant CWE: CWE-35 Path Traversal: '.../...//' CVSS Version Base Score Base Severity Vector String 3.1 6.8 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N View CVE Details CVE-2026-44415 Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data. Read More 96 Affected Products Industrial Edge Device Kit - arm64 V1.10 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.19 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.20 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.21 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.22 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.23 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.24 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.25 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.26 < V1.26.2-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.26.2-1 or later version Industrial Edge Device Kit - arm64 V1.27 < V1.27.1-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.27.1-1 or later version Industrial Edge Device Kit - arm64 V1.28 < V1.28.0-6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.28.0-6 or later version Industrial Edge Device Kit - arm64 V1.11 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.5 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.7 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.8 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.9 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.10 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.11 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.12 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.13 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.14 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.12 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.15 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.16 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.17 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.18 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.19 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.20 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.21 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.22 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.23 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.24 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.13 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.25 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.26 < V1.26.2-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.26.2-1 or later version Industrial Edge Device Kit - x86-64 V1.27 < V1.27.1-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.27.1-1 or later version Industrial Edge Device Kit - x86-64 V1.28 < V1.28.0-6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.28.0-6 or later version Industrial Edge Device Kit - x86-64 V1.5 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.7 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.8 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.9 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.14 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.15 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.16 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.17 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.18 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.10 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.19 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.20 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.21 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.22 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.23 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.24 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.25 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.26 < V1.26.2-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.26.2-1 or later version Industrial Edge Device Kit - arm64 V1.27 < V1.27.1-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.27.1-1 or later version Industrial Edge Device Kit - arm64 V1.28 < V1.28.0-6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.28.0-6 or later version Industrial Edge Device Kit - arm64 V1.11 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.5 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.7 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.8 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.9 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.10 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.11 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.12 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.13 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.14 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.12 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.15 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.16 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.17 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.18 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.19 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.20 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.21 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.22 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.23 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.24 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.13 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.25 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.26 < V1.26.2-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.26.2-1 or later version Industrial Edge Device Kit - x86-64 V1.27 < V1.27.1-1 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.27.1-1 or later version Industrial Edge Device Kit - x86-64 V1.28 < V1.28.0-6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only Vendor fixUpdate to V1.28.0-6 or later version Industrial Edge Device Kit - x86-64 V1.5 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.6 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.7 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.8 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - x86-64 V1.9 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.14 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.15 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.16 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.17 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Industrial Edge Device Kit - arm64 V1.18 Product Status: known_affected Remediations MitigationEnsure network access to affected products is limited to trusted parties only No fix plannedCurrently no fix is planned Additional Metrics Relevant CWE: CWE-35 Path Traversal: '.../...//' CVSS Version Base Score Base Severity Vector String 3.1 9.1 CRITICAL CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H View CVE Details Acknowledgments Siemens ProductCERT reported these vulnerabilities to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-377139 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-377139 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it. The following versions of Siemens Software Center are affected: Siemens Software Center vers:intdot/<4.0.9.8 (CVE-2026-110936) CVSS Vendor Equipment v3 6.7 Siemens Siemens Software Center 1 Vulnerability Uncontrolled Search Path Element Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2026-110936 The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Read More 1 Affected Product Siemens Software Center < V4.0.9.8 Product Status: known_affected Remediations Vendor fixUpdate to V4.0.9.8 or later version (All existing versions of SSC will be auto updated on next startup. The latest version can also be downloaded in the respective link) Additional Metrics Relevant CWE: CWE-427 Uncontrolled Search Path Element CVSS Version Base Score Base Severity Vector String 3.1 6.7 MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H View CVE Details Acknowledgments Siemens ProductCERT reported this vulnerability to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-580366 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-15 Date Revision Summary 2026-10-15 1 Publication Date 2026-10-17 2 Added remediation for Siemens Software Center 2026-10-19 3 Added reference to blog post about active exploitation of the vulnerability 2026-10-22 4 Initial CISA Republication of Siemens ProductCERT SSA-580366 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends updating to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens Capital Embedded AR Classic are affected: Capital Embedded AR Classic 431-422 vers:all/* (CVE-2026-89208) Capital Embedded AR Classic R20-11 vers:intdot/<2303 (CVE-2026-89208) CVSS Vendor Equipment v3 5.3 Siemens Capital Embedded AR Classic 431-422 1 Vulnerability Out-of-bounds Read Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2026-89208 The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries. Read More 2 Affected Products Capital Embedded AR Classic 431-422 Product Status: known_affected Remediations MitigationApply network segmentation and put the ECUs behind properly configured gateways/firewalls No fix plannedCurrently no fix is planned Capital Embedded AR Classic R20-11 < V2303 Product Status: known_affected Remediations MitigationApply network segmentation and put the ECUs behind properly configured gateways/firewalls Vendor fixUpdate to V2303 or later version Additional Metrics Relevant CWE: CWE-125 Out-of-bounds Read CVSS Version Base Score Base Severity Vector String 3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N View CVE Details Acknowledgments Siemens ProductCERT reported this vulnerability to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-055299 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-055299 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service. Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version. The following versions of Siemens RUGGEDCOM CROSSBOW are affected: RUGGEDCOM CROSSBOW vers:intdot/<6.0 (CVE-2026-89196, CVE-2026-89197, CVE-2026-89198, CVE-2026-89199, CVE-2026-89200, CVE-2026-89201, CVE-2026-89202, CVE-2026-89203, CVE-2026-89204, CVE-2026-89205, CVE-2026-89206) CVSS Vendor Equipment v3 8.8 Siemens RUGGEDCOM CROSSBOW 4 Vulnerabilities Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Authorization Bypass Through User-Controlled Key, Insertion of Sensitive Information Into Sent Data, Client-Side Enforcement of Server-Side Security Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-89196 Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. Read More 1 Affected Product RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2026-89197 Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. Read More 2 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2026-89198 Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. Read More 3 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2026-89199 Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation. Read More 4 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2026-89200 Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database. Read More 5 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS Version Base Score Base Severity Vector String 3.1 6.7 MEDIUM CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2026-89201 Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. Read More 6 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS Version Base Score Base Severity Vector String 3.1 7.5 HIGH CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2026-89202 Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including administrators, leading to a denial of service. Read More 7 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key CVSS Version Base Score Base Severity Vector String 3.1 6.5 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H View CVE Details CVE-2026-89203 Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker to gather sensitive information about the system's infrastructure, including details on all devices, substations, users, and scheduled activities. Read More 8 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-201 Insertion of Sensitive Information Into Sent Data CVSS Version Base Score Base Severity Vector String 3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N View CVE Details CVE-2026-89204 Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation. Read More 9 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-639 Authorization Bypass Through User-Controlled Key CVSS Version Base Score Base Severity Vector String 3.1 5.4 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N View CVE Details CVE-2026-89205 Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices. Read More 10 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-602 Client-Side Enforcement of Server-Side Security CVSS Version Base Score Base Severity Vector String 3.1 6.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L View CVE Details CVE-2026-89206 Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization. Read More 11 Affected Products RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version RUGGEDCOM CROSSBOW < V6.0 Product Status: known_affected Remediations Vendor fixUpdate to V6.0 or later version Additional Metrics Relevant CWE: CWE-602 Client-Side Enforcement of Server-Side Security CVSS Version Base Score Base Severity Vector String 3.1 6.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L View CVE Details Acknowledgments Siemens ProductCERT reported these vulnerabilities to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-508506 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-508506 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens SIMATIC IPCs are affected: SIMATIC IPC BX-21A vers:intdot/<31.01.13 (CVE-2026-72895) SIMATIC IPC RW-543A vers:intdot/<1.1.4 (CVE-2026-72895) SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G vers:intdot/<28.01.15 (CVE-2026-72895) CVSS Vendor Equipment v3 7.7 Siemens SIMATIC IPC BX-21A 1 Vulnerability Use of Default Cryptographic Key Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2026-72895 A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a local attacker with physical or administrative access to the device to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled, potentially leading to a full loss of confidentiality, integrity, and availability of the device. Read More 3 Affected Products SIMATIC IPC BX-21A < V31.01.13 Product Status: known_affected Remediations MitigationNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards. MitigationAs a temporary mitigation, users can manually remove the test key from the database (e.g., "DO NOT TRUST - AMI Test PK" for RW-543A or "insyde-ElkhartLake" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended. Vendor fixUpdate to V31.01.13 or later version SIMATIC IPC RW-543A < V1.1.4 Product Status: known_affected Remediations MitigationNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards. MitigationAs a temporary mitigation, users can manually remove the test key from the database (e.g., "DO NOT TRUST - AMI Test PK" for RW-543A or "insyde-ElkhartLake" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended. Vendor fixUpdate to V1.1.4 or later version SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G < V28.01.15 Product Status: known_affected Remediations MitigationNote: After upgrading to the fixed BIOS version, users must load the BIOS default settings. If Secure Boot keys were already provisioned, they must be provisioned again afterwards. MitigationAs a temporary mitigation, users can manually remove the test key from the database (e.g., "DO NOT TRUST - AMI Test PK" for RW-543A or "insyde-ElkhartLake" for IPC227G/277G/327G/377G and BX-21A). Note: Loading default settings will restore the test key, so upgrading remains recommended. Vendor fixUpdate to V28.01.15 or later version Additional Metrics Relevant CWE: CWE-1394 Use of Default Cryptographic Key CVSS Version Base Score Base Severity Vector String 3.1 7.7 HIGH CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H View CVE Details Acknowledgments Siemens ProductCERT reported this vulnerability to CISA. General Recommendations As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-159454 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-159454 advisory Legal Notice and Terms of Use
CISA advisories
View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available. The following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/>=3.1.7 SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) vers:intdot/>=3.1.7 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) vers:intdot/>=3.1.7 SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) vers:intdot/>=3.1.7 SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) vers:intdot/>=3.1.7 CVSS Vendor Equipment v3 10 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) 428 Vulnerabilities Access of Resource Using Incompatible Type ('Type Confusion'), Access of Uninitialized Pointer, Active Debug Code, Buffer Access with Incorrect Length Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Buffer Underwrite ('Buffer Underflow'), Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Deadlock, Divide By Zero, Expired Pointer Dereference, Exposure of Sensitive Information Due to Incompatible Policies, Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution, Improper Enforcement of Behavioral Workflow, Improper Following of Specification by Caller, Improper Handling of Invalid Use of Special Elements, Improper Handling of Length Parameter Inconsistency, Improper Handling of Missing Special Element, Improper Handling of Structural Elements, Improper Input Validation, Improper Locking, Improper Neutralization of Null Byte or NUL Character, Improper Null Termination, Improper Privilege Management, Improper Resource Locking, Improper Resource Shutdown or Release, Improper Update of Reference Count, Improper Validation of Specified Index, Position, or Offset in Input, Improper Validation of Specified Quantity in Input, Improper Validation of Specified Type of Input, Improperly Implemented Security Check for Standard, Incomplete Cleanup, Incomplete Internal State Distinction, Incorrect Calculation of Buffer Size, Incorrect Conversion between Numeric Types, Incorrect Privilege Assignment, Incorrect Synchronization, Incorrect Type Conversion or Cast, Integer Overflow or Wraparound, Loop with Unreachable Exit Condition ('Infinite Loop'), Memory Allocation with Excessive Size Value, Misinterpretation of Input, Missing Critical Step in Authentication, Missing Default Case in Multiple Condition Expression, Missing Encryption of Sensitive Data, Missing Initialization of Resource, Missing Release of Memory after Effective Lifetime, Missing Release of Resource after Effective Lifetime, Missing Report of Error Condition, Missing Synchronization, Multiple Releases of Same Resource or Handle, NULL Pointer Dereference, Operation on a Resource after Expiration or Release, Out-of-bounds Read, Out-of-bounds Write, Plaintext Storage of a Password, Race Condition within a Thread, Reachable Assertion, Release of Invalid Pointer or Reference, Signal Handler Race Condition, Time-of-check Time-of-use (TOCTOU) Race Condition, Transmission of Private Resources into a New Sphere ('Resource Leak'), Trust of System Event Data, Unchecked Return Value, Uncontrolled Recursion, Untrusted Pointer Dereference, Use After Free, Use of Externally-Controlled Format String, Use of Uninitialized Resource, Use of Uninitialized Variable, Write-what-where Condition Background Critical Infrastructure Sectors: Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities Countries/Areas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. Read More 5 Affected Products SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= V3.1.7 Product Status: known_affected Remediations MitigationLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. MitigationOnly build and run applications from trusted sources. None availableCurrently no fix is available SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= V3.1.7 Product Status: known_affected Remediations MitigationLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. MitigationOnly build and run applications from trusted sources. None availableCurrently no fix is available SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= V3.1.7 Product Status: known_affected Remediations MitigationLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. MitigationOnly build and run applications from trusted sources. None availableCurrently no fix is available SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= V3.1.7 Product Status: known_affected Remediations MitigationLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. MitigationOnly build and run applications from trusted sources. None availableCurrently no fix is available SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= V3.1.7 Product Status: known_affected Remediations MitigationLimit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only. MitigationOnly build and run applications from trusted sources. None availableCurrently no fix is available Additional Metrics Relevant CWE: CWE-311 Missing Encryption of Sensitive Data CVSS Version Base Score Base Severity Vector String 3.1 7 HIGH CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H View CVE Details CVE-2021-41617 CVE-2023-28531 CVE-2023-51384 CVE-2023-52927 CVE-2023-53292 CVE-2024-26783 CVE-2024-27056 CVE-2024-28956 CVE-2024-36903 CVE-2024-36927 CVE-2024-42079 CVE-2024-46786 CVE-2024-47736 CVE-2024-47809 CVE-2024-49968 CVE-2024-49994 CVE-2024-49998 CVE-2024-50014 CVE-2024-50063 CVE-2024-50164 CVE-2024-50298 CVE-2024-53124 CVE-2024-53170 CVE-2024-54458 CVE-2024-56631 CVE-2024-56703 CVE-2024-56719 CVE-2024-57917 CVE-2024-57924 CVE-2024-57973 CVE-2024-57977 CVE-2024-57979 CVE-2024-58011 CVE-2024-58016 CVE-2024-58020 CVE-2024-58056 CVE-2024-58058 CVE-2024-58061 CVE-2024-58086 CVE-2025-21645 CVE-2025-21648 CVE-2025-21655 CVE-2025-21676 CVE-2025-21682 CVE-2025-21702 CVE-2025-21705 CVE-2025-21706 CVE-2025-21707 CVE-2025-21718 CVE-2025-21731 CVE-2025-21745 CVE-2025-21758 CVE-2025-21760 CVE-2025-21764 CVE-2025-21765 CVE-2025-21780 CVE-2025-21795 CVE-2025-21796 CVE-2025-21802 CVE-2025-21814 CVE-2025-21846 CVE-2025-21853 CVE-2025-21861 CVE-2025-21863 CVE-2025-21864 CVE-2025-21867 CVE-2025-21875 CVE-2025-21887 CVE-2025-21913 CVE-2025-21919 CVE-2025-21925 CVE-2025-21926 CVE-2025-21938 CVE-2025-21959 CVE-2025-21999 CVE-2025-22005 CVE-2025-22015 CVE-2025-22055 CVE-2025-22056 CVE-2025-22060 CVE-2025-22083 CVE-2025-22090 CVE-2025-22095 CVE-2025-22107 CVE-2025-22111 CVE-2025-22121 CVE-2025-23136 CVE-2025-23143 CVE-2025-37785 CVE-2025-37909 CVE-2025-37917 CVE-2025-37945 CVE-2025-37959 CVE-2025-37964 CVE-2025-37972 CVE-2025-37980 CVE-2025-38125 CVE-2025-38162 CVE-2025-38192 CVE-2025-38201 CVE-2025-38232 CVE-2025-38322 CVE-2025-38591 CVE-2025-38614 CVE-2025-38681 CVE-2025-38704 CVE-2025-38721 CVE-2025-38725 CVE-2025-38727 CVE-2025-38732 CVE-2025-38736 CVE-2025-39681 CVE-2025-39691 CVE-2025-39721 CVE-2025-39748 CVE-2025-39756 CVE-2025-39764 CVE-2025-39770 CVE-2025-39773 CVE-2025-39782 CVE-2025-39795 CVE-2025-39826 CVE-2025-39827 CVE-2025-39845 CVE-2025-39866 CVE-2025-39871 CVE-2025-39931 CVE-2025-39953 CVE-2025-39955 CVE-2025-39964 CVE-2025-39977 CVE-2025-39978 CVE-2025-39980 CVE-2025-40022 CVE-2025-40070 CVE-2025-40078 CVE-2025-40080 CVE-2025-40105 CVE-2025-40135 CVE-2025-40149 CVE-2025-40196 CVE-2025-40219 CVE-2025-40261 CVE-2025-40300 CVE-2025-61984 CVE-2025-61985 CVE-2025-68206 CVE-2025-68261 CVE-2025-68264 CVE-2025-68265 CVE-2025-68266 CVE-2025-68291 CVE-2025-68337 CVE-2025-68349 CVE-2025-68363 CVE-2025-68371 CVE-2025-68724 CVE-2025-68725 CVE-2025-68742 CVE-2025-68764 CVE-2025-68773 CVE-2025-68776 CVE-2025-68782 CVE-2025-68787 CVE-2025-68788 CVE-2025-68798 CVE-2025-68803 CVE-2025-68814 CVE-2025-68816 CVE-2025-68818 CVE-2025-68820 CVE-2025-71064 CVE-2025-71075 CVE-2025-71079 CVE-2025-71085 CVE-2025-71086 CVE-2025-71088 CVE-2025-71095 CVE-2025-71097 CVE-2025-71098 CVE-2025-71104 CVE-2025-71112 CVE-2025-71113 CVE-2025-71114 CVE-2025-71120 CVE-2025-71123 CVE-2025-71131 CVE-2025-71161 CVE-2025-71162 CVE-2025-71163 CVE-2025-71185 CVE-2025-71186 CVE-2025-71189 CVE-2025-71190 CVE-2025-71191 CVE-2025-71197 CVE-2025-71221 CVE-2025-71265 CVE-2025-71266 CVE-2025-71267 CVE-2026-3497 CVE-2026-22977 CVE-2026-22979 CVE-2026-22980 CVE-2026-22982 CVE-2026-22992 CVE-2026-22994 CVE-2026-23003 CVE-2026-23005 CVE-2026-23010 CVE-2026-23011 CVE-2026-23019 CVE-2026-23026 CVE-2026-23038 CVE-2026-23054 CVE-2026-23060 CVE-2026-23083 CVE-2026-23084 CVE-2026-23086 CVE-2026-23087 CVE-2026-23095 CVE-2026-23100 CVE-2026-23103 CVE-2026-23110 CVE-2026-23111 CVE-2026-23113 CVE-2026-23154 CVE-2026-23204 CVE-2026-23231 CVE-2026-23242 CVE-2026-23243 CVE-2026-23245 CVE-2026-23255 CVE-2026-23270 CVE-2026-23271 CVE-2026-23273 CVE-2026-23274 CVE-2026-23277 CVE-2026-23284 CVE-2026-23287 CVE-2026-23290 CVE-2026-23293 CVE-2026-23300 CVE-2026-23304 CVE-2026-23319 CVE-2026-23321 CVE-2026-23335 CVE-2026-23340 CVE-2026-23343 CVE-2026-23351 CVE-2026-23359 CVE-2026-23365 CVE-2026-23368 CVE-2026-23370 CVE-2026-23378 CVE-2026-23379 CVE-2026-23381 CVE-2026-23391 CVE-2026-23392 CVE-2026-23397 CVE-2026-23398 CVE-2026-23399 CVE-2026-23414 CVE-2026-23422 CVE-2026-23434 CVE-2026-23438 CVE-2026-23439 CVE-2026-23446 CVE-2026-23449 CVE-2026-23450 CVE-2026-23452 CVE-2026-23454 CVE-2026-23455 CVE-2026-23456 CVE-2026-23457 CVE-2026-23458 CVE-2026-23463 CVE-2026-23474 CVE-2026-23475 CVE-2026-27135 CVE-2026-31389 CVE-2026-31391 CVE-2026-31396 CVE-2026-31402 CVE-2026-31403 CVE-2026-31411 CVE-2026-31414 CVE-2026-31415 CVE-2026-31416 CVE-2026-31417 CVE-2026-31418 CVE-2026-31421 CVE-2026-31422 CVE-2026-31423 CVE-2026-31424 CVE-2026-31427 CVE-2026-31428 CVE-2026-31441 CVE-2026-31446 CVE-2026-31447 CVE-2026-31448 CVE-2026-31449 CVE-2026-31450 CVE-2026-31452 CVE-2026-31466 CVE-2026-31469 CVE-2026-31485 CVE-2026-31494 CVE-2026-31495 CVE-2026-31496 CVE-2026-31503 CVE-2026-31504 CVE-2026-31507 CVE-2026-31508 CVE-2026-31515 CVE-2026-31518 CVE-2026-31521 CVE-2026-31533 CVE-2026-31546 CVE-2026-31555 CVE-2026-31563 CVE-2026-31565 CVE-2026-31628 CVE-2026-31634 CVE-2026-31649 CVE-2026-31651 CVE-2026-31658 CVE-2026-31664 CVE-2026-31665 CVE-2026-31669 CVE-2026-31670 CVE-2026-31671 CVE-2026-31674 CVE-2026-31680 CVE-2026-31681 CVE-2026-31682 CVE-2026-31700 CVE-2026-31737 CVE-2026-31752 CVE-2026-31761 CVE-2026-31768 CVE-2026-40355 CVE-2026-41989 CVE-2026-43011 CVE-2026-43024 CVE-2026-43025 CVE-2026-43026 CVE-2026-43027 CVE-2026-43028 CVE-2026-43030 CVE-2026-43033 CVE-2026-43035 CVE-2026-43038 CVE-2026-43040 CVE-2026-43057 CVE-2026-43071 CVE-2026-43085 CVE-2026-43089 CVE-2026-43116 CVE-2026-43216 CVE-2026-43303 CVE-2026-43492 CVE-2026-43499 CVE-2026-43501 CVE-2026-45841 CVE-2026-46015 CVE-2026-46021 CVE-2026-46033 CVE-2026-46037 CVE-2026-46040 CVE-2026-46046 CVE-2026-46086 CVE-2026-46101 CVE-2026-46116 CVE-2026-46132 CVE-2026-46172 CVE-2026-46173 CVE-2026-46174 CVE-2026-46193 CVE-2026-46303 CVE-2026-46306 CVE-2026-46323 CVE-2026-46333 CVE-2026-52910 CVE-2026-52912 CVE-2026-52930 CVE-2026-52933 CVE-2026-52942 CVE-2026-52943 CVE-2026-52946 CVE-2026-52970 CVE-2026-52986 CVE-2026-52998 CVE-2026-52999 CVE-2026-53001 CVE-2026-53002 CVE-2026-53006 CVE-2026-53012 CVE-2026-53050 CVE-2026-53134 CVE-2026-53218 CVE-2026-53219 CVE-2026-53223 CVE-2026-53236 CVE-2026-53239 CVE-2026-53249 CVE-2026-53268 CVE-2026-53269 CVE-2026-53275 CVE-2026-53295 CVE-2026-53352 CVE-2026-53400 CVE-2026-63810 CVE-2026-64279 CVE-2026-64317 CVE-2026-64370 CVE-2026-64371 CVE-2026-64375 CVE-2026-64411 CVE-2026-64412 CVE-2026-64413 CVE-2026-64422 CVE-2026-64423 CVE-2026-64425 CVE-2026-64538 CVE-2026-64545 CVE-2026-64552 CVE-2026-64560 Acknowledgments Siemens ProductCERT reported these vulnerabilities to CISA. General Recommendations As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens' operational guidelines for Industrial Security (https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity Additional Resources For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories Terms of Use The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use. Recommended Practices CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability. Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Advisory Conversion Disclaimer This ICSA is a verbatim republication of Siemens ProductCERT SSA-457936 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory. Revision History Initial Release Date: 2026-10-13 Date Revision Summary 2026-10-13 1 Publication Date 2026-10-22 2 Initial CISA Republication of Siemens ProductCERT SSA-457936 advisory Legal Notice and Terms of Use