Authorization bypass in Siemens Industrial Edge Cloud Device
Priority MEDIUM 50CWE-639Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.
Summary
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00653 51st percentileScored 2026-11-07
Fix Fixed Industrial Edge Cloud Device (IECD) (Siemens): V1.24.2Industrial Edge Device Kit - arm64 V1.24 (Siemens): V1.24.2+67 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | Industrial Edge Cloud Device (IECD) | before V1.24.2 | V1.24.2 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.10 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.11 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.12 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.13 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.14 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.15 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.16 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.17 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.18 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.19 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.20 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.21 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.22 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.23 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.24 | before V1.24.2 | V1.24.2 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.25 | before V1.25.1 | V1.25.1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.5 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.6 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.7 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.8 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - arm64 V1.9 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.10 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.11 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.12 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.13 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.14 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.15 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.16 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.17 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.18 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.19 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.20 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.21 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.22 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.23 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.24 | before V1.24.2 | V1.24.2 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.25 | before V1.25.1 | V1.25.1 | Patch available | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.5 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.6 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.7 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.8 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Device Kit - x86-64 V1.9 | all versions | — | No fix listed | CNA |
| Siemens | Industrial Edge Own Device (IEOD) | before V1.24.2 | V1.24.2 | Patch available | CNA |
| Siemens | Industrial Edge Virtual Device (IEVD) | before V1.24.2 | V1.24.2 | Patch available | CNA |
| Siemens | SCALANCE LPE9413 | before V2.2 | V2.2 | Patch available | CNA |
| Siemens | SCALANCE LPE9433 | before V2.2 | V2.2 | Patch available | CNA |
| Siemens | SIMATIC Automation Workstation 19" | before V1.3 | V1.3 | Patch available | CNA |
| Siemens | SIMATIC Automation Workstation 24" | before V1.3 | V1.3 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1000, Unified Comfort Panel neutral | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Hygienic | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Panel | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Panel neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC HMI MTP700, Unified Comfort Panel neutral design | before V21 | V21 | Patch available | CNA |
| Siemens | SIMATIC IOT2050 | before V1.25.1 | V1.25.1 | Patch available | CNA |
| Siemens | SIMATIC IPC BX-39A Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIMATIC IPC BX-59A Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIMATIC IPC127E Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIMATIC IPC227E Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIMATIC IPC227G Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIMATIC IPC427E Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIMATIC IPC847E Industrial Edge Device | before V3.1 | V3.1 | Patch available | CNA |
| Siemens | SIPLUS HMI MTP1000 Unified Comfort | before V21 | V21 | Patch available | CNA |
| Siemens | SIPLUS HMI MTP1200 Unified Comfort | before V21 | V21 | Patch available | CNA |
| Siemens | SIPLUS HMI MTP700 Unified Comfort | before V21 | V21 | Patch available | CNA |
- Industrial Edge Cloud Device (IECD) VendorSiemens Affected before V1.24.2 Fixed in V1.24.2 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.10 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.11 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.13 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.14 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.15 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.16 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.21 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.22 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.23 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.24 VendorSiemens Affected before V1.24.2 Fixed in V1.24.2 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.25 VendorSiemens Affected before V1.25.1 Fixed in V1.25.1 Patch available CNA
- Industrial Edge Device Kit - arm64 V1.5 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.8 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - arm64 V1.9 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.10 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.11 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.12 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.13 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.14 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.15 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.16 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.17 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.18 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.19 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.20 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.21 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.22 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.23 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.24 VendorSiemens Affected before V1.24.2 Fixed in V1.24.2 Patch available CNA
- Industrial Edge Device Kit - x86-64 V1.25 VendorSiemens Affected before V1.25.1 Fixed in V1.25.1 Patch available CNA
- Industrial Edge Device Kit - x86-64 V1.5 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.6 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.7 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.8 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Device Kit - x86-64 V1.9 VendorSiemens Affected all versions Fixed in — No fix listed CNA
- Industrial Edge Own Device (IEOD) VendorSiemens Affected before V1.24.2 Fixed in V1.24.2 Patch available CNA
- Industrial Edge Virtual Device (IEVD) VendorSiemens Affected before V1.24.2 Fixed in V1.24.2 Patch available CNA
- SCALANCE LPE9413 VendorSiemens Affected before V2.2 Fixed in V2.2 Patch available CNA
- SCALANCE LPE9433 VendorSiemens Affected before V2.2 Fixed in V2.2 Patch available CNA
- SIMATIC Automation Workstation 19" VendorSiemens Affected before V1.3 Fixed in V1.3 Patch available CNA
- SIMATIC Automation Workstation 24" VendorSiemens Affected before V1.3 Fixed in V1.3 Patch available CNA
- SIMATIC HMI MTP1000 Unified Comfort Panel VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1000 Unified Comfort Panel hygienic VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1000, Unified Comfort Panel neutral VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Unified Comfort Panel VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Unified Comfort Panel hygienic VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1200 Unified Comfort Panel neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Unified Comfort Panel VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Unified Comfort Panel hygienic VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1500 Unified Comfort Panel neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Unified Comfort Panel VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Unified Comfort Panel hygienic VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP1900 Unified Comfort Panel neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Unified Comfort Hygienic VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Unified Comfort Panel VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP2200 Unified Comfort Panel neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP700 Unified Comfort Panel VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC HMI MTP700, Unified Comfort Panel neutral design VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIMATIC IOT2050 VendorSiemens Affected before V1.25.1 Fixed in V1.25.1 Patch available CNA
- SIMATIC IPC BX-39A Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIMATIC IPC BX-59A Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIMATIC IPC127E Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIMATIC IPC227E Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIMATIC IPC227G Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIMATIC IPC427E Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIMATIC IPC847E Industrial Edge Device VendorSiemens Affected before V3.1 Fixed in V3.1 Patch available CNA
- SIPLUS HMI MTP1000 Unified Comfort VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIPLUS HMI MTP1200 Unified Comfort VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
- SIPLUS HMI MTP700 Unified Comfort VendorSiemens Affected before V21 Fixed in V21 Patch available CNA
Remediation
- Fix · CNA Industrial Edge Cloud Device (IECD) (Siemens) Fixed in V1.24.2
- Fix · CNA Industrial Edge Device Kit - arm64 V1.24 (Siemens) Fixed in V1.24.2
- Fix · CNA Industrial Edge Device Kit - arm64 V1.25 (Siemens) Fixed in V1.25.1
- Fix · CNA Industrial Edge Device Kit - x86-64 V1.24 (Siemens) Fixed in V1.24.2
- Fix · CNA Industrial Edge Device Kit - x86-64 V1.25 (Siemens) Fixed in V1.25.1
- Fix · CNA Industrial Edge Own Device (IEOD) (Siemens) Fixed in V1.24.2
- Fix · CNA Industrial Edge Virtual Device (IEVD) (Siemens) Fixed in V1.24.2
- Fix · CNA SCALANCE LPE9413 (Siemens) Fixed in V2.2
- Fix · CNA SCALANCE LPE9433 (Siemens) Fixed in V2.2
- Fix · CNA SIMATIC Automation Workstation 19" (Siemens) Fixed in V1.3
- Fix · CNA SIMATIC Automation Workstation 24" (Siemens) Fixed in V1.3
- Fix · CNA SIMATIC HMI MTP1000 Unified Comfort Panel (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1000, Unified Comfort Panel neutral (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Unified Comfort Panel (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Unified Comfort Panel (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Unified Comfort Panel (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Unified Comfort Hygienic (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Unified Comfort Panel (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP700 Unified Comfort Panel (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC HMI MTP700, Unified Comfort Panel neutral design (Siemens) Fixed in V21
- Fix · CNA SIMATIC IOT2050 (Siemens) Fixed in V1.25.1
- Fix · CNA SIMATIC IPC BX-39A Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIMATIC IPC BX-59A Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIMATIC IPC127E Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIMATIC IPC227E Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIMATIC IPC227G Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIMATIC IPC427E Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIMATIC IPC847E Industrial Edge Device (Siemens) Fixed in V3.1
- Fix · CNA SIPLUS HMI MTP1000 Unified Comfort (Siemens) Fixed in V21
- Fix · CNA SIPLUS HMI MTP1200 Unified Comfort (Siemens) Fixed in V21
- Fix · CNA SIPLUS HMI MTP700 Unified Comfort (Siemens) Fixed in V21
Timeline
- 2026-10-02 Threatist record created from CVE-2025-40805
- 2026-10-03 Alias added: GHSA-8gqp-3rhh-936h
- 2026-10-06 EPSS moved to the 50th–90th percentile
- 2026-10-09 EPSS moved to the below the 50th percentile
- 2026-10-14 EPSS moved to the 50th–90th percentile
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2025-40805 · CVE Program
- CVE-2025-40805 · NVD
- FIRST EPSS
- GHSA-8gqp-3rhh-936h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences