Authentication Bypass in Industrial Edge Management Products by Siemens

CVE-2026-33892

What is CVE-2026-33892?

A vulnerability exists in the Industrial Edge Management suite affecting versions between specified thresholds that fails to properly enforce user authentication on remote connections. This flaw could enable unauthenticated remote attackers to bypass authentication mechanisms and impersonate legitimate users, risking unauthorized access to sensitive systems. Successful exploitation hinges on the attacker's knowledge of the specific header and port used for remote connections, as well as ensuring that the remote connection feature is active on the target device. Despite this flaw, security measures in the device, such as application-specific authentication, remain intact.

References