Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.9

Siemens Edge Device Kit lets logged‑in users see internal data

CVE-2026-44415 · published 3 days ago
Summary

Versions 1.10 through 1.14 of the Siemens Industrial Edge Device Kit do not correctly block authenticated users from internal APIs and paths. This can let a user who has logged in view or delete sensitive information, potentially leading to broader system compromise. Apply the latest security updates from Siemens and review access controls to limit what authenticated users can reach.

What to do
  • Update siemens industrial edge device kit - arm64 v1.10 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.11 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.12 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.13 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.14 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.15 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.16 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.17 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.18 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.19 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.20 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.21 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.22 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.23 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.24 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.25 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.26 to version V1.26.2-1 or later.
  • Update siemens industrial edge device kit - arm64 v1.27 to version V1.27.1-1 or later.
  • Update siemens industrial edge device kit - arm64 v1.28 to version V1.28.0-6 or later.
  • Update siemens industrial edge device kit - arm64 v1.5 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.6 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.7 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.8 to version * or later.
  • Update siemens industrial edge device kit - arm64 v1.9 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.10 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.11 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.12 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.13 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.14 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.15 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.16 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.17 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.18 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.19 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.20 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.21 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.22 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.23 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.24 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.25 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.26 to version V1.26.2-1 or later.
  • Update siemens industrial edge device kit - x86-64 v1.27 to version V1.27.1-1 or later.
  • Update siemens industrial edge device kit - x86-64 v1.28 to version V1.28.0-6 or later.
  • Update siemens industrial edge device kit - x86-64 v1.5 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.6 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.7 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.8 to version * or later.
  • Update siemens industrial edge device kit - x86-64 v1.9 to version * or later.
  • Update siemens simatic hmi mtp1000 unified comfort panel to version * or later.
  • Update siemens simatic hmi mtp1000 unified comfort panel hygienic to version * or later.
  • Update siemens simatic hmi mtp1000 unified comfort panel hygienic neutral design to version * or later.
  • Update siemens simatic hmi mtp1000, unified comfort panel neutral to version * or later.
  • Update siemens simatic hmi mtp1200 comfort pro for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp1200 comfort pro for support arm (expandable, round tube) and extension unit to version * or later.
  • Update siemens simatic hmi mtp1200 comfort pro for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp1200 comfort pro neutral design for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp1200 comfort pro neutral design for support arm (expandable, round tube) and extension to version * or later.
  • Update siemens simatic hmi mtp1200 comfort pro neutral design for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp1200 unified comfort panel to version * or later.
  • Update siemens simatic hmi mtp1200 unified comfort panel hygienic to version * or later.
  • Update siemens simatic hmi mtp1200 unified comfort panel hygienic neutral design to version * or later.
  • Update siemens simatic hmi mtp1200 unified comfort panel neutral design to version * or later.
  • Update siemens simatic hmi mtp1500 comfort pro for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp1500 comfort pro for support arm (expandable, round tube) and extension unit to version * or later.
  • Update siemens simatic hmi mtp1500 comfort pro for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp1500 comfort pro neutral design for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp1500 comfort pro neutral design for support arm (expandable, round tube) and extension to version * or later.
  • Update siemens simatic hmi mtp1500 comfort pro neutral design for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp1500 unified comfort panel to version * or later.
  • Update siemens simatic hmi mtp1500 unified comfort panel hygienic to version * or later.
  • Update siemens simatic hmi mtp1500 unified comfort panel hygienic neutral design to version * or later.
  • Update siemens simatic hmi mtp1500 unified comfort panel neutral design to version * or later.
  • Update siemens simatic hmi mtp1900 comfort pro for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp1900 comfort pro for support arm (expandable, round tube) and extension unit to version * or later.
  • Update siemens simatic hmi mtp1900 comfort pro for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp1900 comfort pro neutral design for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp1900 comfort pro neutral design for support arm (expandable, round tube) and extension to version * or later.
  • Update siemens simatic hmi mtp1900 comfort pro neutral design for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp1900 unified comfort panel to version * or later.
  • Update siemens simatic hmi mtp1900 unified comfort panel hygienic to version * or later.
  • Update siemens simatic hmi mtp1900 unified comfort panel hygienic neutral design to version * or later.
  • Update siemens simatic hmi mtp1900 unified comfort panel neutral design to version * or later.
  • Update siemens simatic hmi mtp2200 comfort pro for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp2200 comfort pro for support arm (expandable, round tube) and extension unit to version * or later.
  • Update siemens simatic hmi mtp2200 comfort pro for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp2200 comfort pro neutral design for stand (expandable, flange at the bottom) to version * or later.
  • Update siemens simatic hmi mtp2200 comfort pro neutral design for support arm (expandable, round tube) and extension to version * or later.
  • Update siemens simatic hmi mtp2200 comfort pro neutral design for support arm (not extendable, flange on top) to version * or later.
  • Update siemens simatic hmi mtp2200 unified comfort hygienic to version * or later.
  • Update siemens simatic hmi mtp2200 unified comfort hygienic neutral design to version * or later.
  • Update siemens simatic hmi mtp2200 unified comfort panel to version * or later.
  • Update siemens simatic hmi mtp2200 unified comfort panel neutral design to version * or later.
  • Update siemens simatic hmi mtp700 unified comfort panel to version * or later.
  • Update siemens simatic hmi mtp700 unified comfort panel hygienic neutral design to version * or later.
  • Update siemens simatic hmi mtp700, unified comfort panel neutral design to version * or later.
  • Update siemens siplus hmi mtp1000 unified comfort to version * or later.
  • Update siemens siplus hmi mtp1200 unified comfort to version * or later.
  • Update siemens siplus hmi mtp700 unified comfort to version * or later.
Affected software
VendorProductAffected versions
siemens industrial edge device kit - arm64 v1.10 < *
siemens industrial edge device kit - arm64 v1.11 < *
siemens industrial edge device kit - arm64 v1.12 < *
siemens industrial edge device kit - arm64 v1.13 < *
siemens industrial edge device kit - arm64 v1.14 < *
siemens industrial edge device kit - arm64 v1.15 < *
siemens industrial edge device kit - arm64 v1.16 < *
siemens industrial edge device kit - arm64 v1.17 < *
siemens industrial edge device kit - arm64 v1.18 < *
siemens industrial edge device kit - arm64 v1.19 < *
siemens industrial edge device kit - arm64 v1.20 < *
siemens industrial edge device kit - arm64 v1.21 < *
siemens industrial edge device kit - arm64 v1.22 < *
siemens industrial edge device kit - arm64 v1.23 < *
siemens industrial edge device kit - arm64 v1.24 < *
siemens industrial edge device kit - arm64 v1.25 < *
siemens industrial edge device kit - arm64 v1.26 < V1.26.2-1
siemens industrial edge device kit - arm64 v1.27 < V1.27.1-1
siemens industrial edge device kit - arm64 v1.28 < V1.28.0-6
siemens industrial edge device kit - arm64 v1.5 < *
siemens industrial edge device kit - arm64 v1.6 < *
siemens industrial edge device kit - arm64 v1.7 < *
siemens industrial edge device kit - arm64 v1.8 < *
siemens industrial edge device kit - arm64 v1.9 < *
siemens industrial edge device kit - x86-64 v1.10 < *
siemens industrial edge device kit - x86-64 v1.11 < *
siemens industrial edge device kit - x86-64 v1.12 < *
siemens industrial edge device kit - x86-64 v1.13 < *
siemens industrial edge device kit - x86-64 v1.14 < *
siemens industrial edge device kit - x86-64 v1.15 < *
siemens industrial edge device kit - x86-64 v1.16 < *
siemens industrial edge device kit - x86-64 v1.17 < *
siemens industrial edge device kit - x86-64 v1.18 < *
siemens industrial edge device kit - x86-64 v1.19 < *
siemens industrial edge device kit - x86-64 v1.20 < *
siemens industrial edge device kit - x86-64 v1.21 < *
siemens industrial edge device kit - x86-64 v1.22 < *
siemens industrial edge device kit - x86-64 v1.23 < *
siemens industrial edge device kit - x86-64 v1.24 < *
siemens industrial edge device kit - x86-64 v1.25 < *
siemens industrial edge device kit - x86-64 v1.26 < V1.26.2-1
siemens industrial edge device kit - x86-64 v1.27 < V1.27.1-1
siemens industrial edge device kit - x86-64 v1.28 < V1.28.0-6
siemens industrial edge device kit - x86-64 v1.5 < *
siemens industrial edge device kit - x86-64 v1.6 < *
siemens industrial edge device kit - x86-64 v1.7 < *
siemens industrial edge device kit - x86-64 v1.8 < *
siemens industrial edge device kit - x86-64 v1.9 < *
siemens simatic hmi mtp1000 unified comfort panel < *
siemens simatic hmi mtp1000 unified comfort panel hygienic < *
Showing 50 of 98. Show the rest
VendorProductAffected versions
siemens simatic hmi mtp1000 unified comfort panel hygienic neutral design < *
siemens simatic hmi mtp1000, unified comfort panel neutral < *
siemens simatic hmi mtp1200 comfort pro for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp1200 comfort pro for support arm (expandable, round tube) and extension unit < *
siemens simatic hmi mtp1200 comfort pro for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp1200 comfort pro neutral design for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp1200 comfort pro neutral design for support arm (expandable, round tube) and extension < *
siemens simatic hmi mtp1200 comfort pro neutral design for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp1200 unified comfort panel < *
siemens simatic hmi mtp1200 unified comfort panel hygienic < *
siemens simatic hmi mtp1200 unified comfort panel hygienic neutral design < *
siemens simatic hmi mtp1200 unified comfort panel neutral design < *
siemens simatic hmi mtp1500 comfort pro for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp1500 comfort pro for support arm (expandable, round tube) and extension unit < *
siemens simatic hmi mtp1500 comfort pro for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp1500 comfort pro neutral design for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp1500 comfort pro neutral design for support arm (expandable, round tube) and extension < *
siemens simatic hmi mtp1500 comfort pro neutral design for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp1500 unified comfort panel < *
siemens simatic hmi mtp1500 unified comfort panel hygienic < *
siemens simatic hmi mtp1500 unified comfort panel hygienic neutral design < *
siemens simatic hmi mtp1500 unified comfort panel neutral design < *
siemens simatic hmi mtp1900 comfort pro for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp1900 comfort pro for support arm (expandable, round tube) and extension unit < *
siemens simatic hmi mtp1900 comfort pro for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp1900 comfort pro neutral design for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp1900 comfort pro neutral design for support arm (expandable, round tube) and extension < *
siemens simatic hmi mtp1900 comfort pro neutral design for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp1900 unified comfort panel < *
siemens simatic hmi mtp1900 unified comfort panel hygienic < *
siemens simatic hmi mtp1900 unified comfort panel hygienic neutral design < *
siemens simatic hmi mtp1900 unified comfort panel neutral design < *
siemens simatic hmi mtp2200 comfort pro for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp2200 comfort pro for support arm (expandable, round tube) and extension unit < *
siemens simatic hmi mtp2200 comfort pro for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp2200 comfort pro neutral design for stand (expandable, flange at the bottom) < *
siemens simatic hmi mtp2200 comfort pro neutral design for support arm (expandable, round tube) and extension < *
siemens simatic hmi mtp2200 comfort pro neutral design for support arm (not extendable, flange on top) < *
siemens simatic hmi mtp2200 unified comfort hygienic < *
siemens simatic hmi mtp2200 unified comfort hygienic neutral design < *
siemens simatic hmi mtp2200 unified comfort panel < *
siemens simatic hmi mtp2200 unified comfort panel neutral design < *
siemens simatic hmi mtp700 unified comfort panel < *
siemens simatic hmi mtp700 unified comfort panel hygienic neutral design < *
siemens simatic hmi mtp700, unified comfort panel neutral design < *
siemens siplus hmi mtp1000 unified comfort < *
siemens siplus hmi mtp1200 unified comfort < *
siemens siplus hmi mtp700 unified comfort < *
Original advisory text
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, whic...
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.9 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-35Path Traversal: '.../...//'
Timeline
Published13 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Sources
CVE-2026-44415 · NVD
CVE-2026-44415 · MITRE
Track software like this
Free during beta