Arbitrary Code Execution Vulnerability in Siemens Meta-IOT2050
CVE-2026-109830

7HIGH

Key Information:

Vendor

Siemens
Status
Meta-iot2050
Vendor
CVE Published:
10 November 2026

What is CVE-2026-109830?

A vulnerability exists in Siemens Meta-IOT2050 devices where unchecked execution of configuration file components could enable an attacker to manipulate the file, leading to execution of arbitrary code on affected devices. This flaw poses significant risks for device integrity and security, necessitating immediate attention and remediation to protect against potential exploitation.

Affected Version(s)

meta-iot2050 V01.03.01

References

https://cert-portal.siemens.com/productcert/html/ssa-7242...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.