Unauthorized Access Vulnerability in Web Browsers of Siemens Devices
CVE-2026-27662
7HIGH
Key Information:
What is CVE-2026-27662?
This vulnerability allows unauthorized access to the web browser of affected Siemens devices through the Control Panel. Without the implementation of appropriate security measures, an attacker with no authentication can exploit this weakness, potentially leading to the identification of backdoors or executing unauthorized commands. The lack of access restrictions may also expose misconfigured settings, further increasing the risks of system compromise and data breaches.
Affected Version(s)
SIMATIC HMI MTP1000 Unified Comfort Panel 0
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic 0
SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design 0