Access Control Flaw in Siemens Products Allows Unauthorized Information Exposure
CVE-2026-44415

8.9HIGH

What is CVE-2026-44415?

An access control vulnerability in Siemens products allows authenticated users to improperly access internal APIs and paths. This misconfiguration can be exploited by attackers to obtain sensitive information, potentially leading to further unauthorized access to the system or even deletion of critical data. Organizations using these products should take immediate steps to secure their systems and mitigate exposure by implementing proper access controls.

Affected Version(s)

Industrial Edge Device Kit - arm64 V1.10 0

Industrial Edge Device Kit - arm64 V1.11 0

Industrial Edge Device Kit - arm64 V1.12 0

References

CVSS V4

Score:
8.9
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.