Remote Access Vulnerability in WTV676-HB6035 and WTV776-HB6035 Web Interfaces
CVE-2026-89207

6.9MEDIUM

Key Information:

Vendor

Siemens
Status
Wtv676-hb6035 Web Interface
Wtv776-hb6035 Web Interface
Vendor
CVE Published:
16 September 2026

What is CVE-2026-89207?

A serious input validation vulnerability exists in the web interfaces of WTV676-HB6035 and WTV776-HB6035 devices. These devices fail to properly validate input received from backend services, enabling a potential unauthenticated remote attacker to manipulate device operations. By exploiting this weakness, attackers can force the devices into protection mode, leading to a loss of essential remote connectivity functions, such as web access, posing significant risks to network security and integrity.

Affected Version(s)

WTV676-HB6035 Web Interface 0

WTV776-HB6035 Web Interface 0

References

https://cert-portal.siemens.com/productcert/html/ssa-8238...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.