Insecure Remote User Authentication in SIMATIC Products by Siemens
CVE-2026-58114

7.7HIGH

Key Information:

Vendor

Siemens
Status
Simatic Batch V9.1
Simatic Information Server 2020
Simatic Information Server 2022
Simatic Pcs 7 V9.1
Vendor
CVE Published:
10 November 2026

What is CVE-2026-58114?

A significant vulnerability has been discovered in various SIMATIC products by Siemens, stemming from weaknesses in remote user authentication mechanisms that utilize the deprecated NTLM protocol. This flaw permits unauthorized remote attackers, using a man-in-the-middle strategy, to relay NTLM authentication messages and masquerade as legitimate users. Such exploitation could lead to unauthorized access to sensitive services, including database servers tied to SIMATIC products, raising urgent concerns about data integrity and system security.

Affected Version(s)

SIMATIC BATCH V9.1 0

SIMATIC Information Server 2020 0

SIMATIC Information Server 2022 0

References

https://cert-portal.siemens.com/productcert/html/ssa-9708...

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.