Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Siemens Capital Embedded AR Classic permits remote data leak

CVE-2026-89208 · published 22 days ago
Summary

Several Siemens control devices, including Capital Embedded AR Classic and Desigo models, can be tricked into reading memory they shouldn’t. An attacker on the network could cause the system to reveal internal information without needing a password. Apply any vendor‑provided patches or updates and restrict network access to these devices.

What to do
  • Update siemens capital embedded ar classic 431-422 to version * or later.
  • Update siemens capital embedded ar classic r20-11 to version V2303 or later.
  • Update siemens desigo pxc00-e.d to version * or later.
  • Update siemens desigo pxc00-u to version * or later.
  • Update siemens desigo pxc001-e.d to version * or later.
  • Update siemens desigo pxc100-e.d to version * or later.
  • Update siemens desigo pxc12-e.d to version * or later.
  • Update siemens desigo pxc128-u to version * or later.
  • Update siemens desigo pxc200-e.d to version * or later.
  • Update siemens desigo pxc22-e.d to version * or later.
  • Update siemens desigo pxc22.1-e.d to version * or later.
  • Update siemens desigo pxc36.1-e.d to version * or later.
  • Update siemens desigo pxc50-e.d to version * or later.
  • Update siemens desigo pxc64-u to version * or later.
  • Update siemens desigo pxm20-e to version * or later.
Affected software
VendorProductAffected versions
siemens capital embedded ar classic 431-422 < *
siemens capital embedded ar classic r20-11 < V2303
siemens desigo pxc00-e.d < *
siemens desigo pxc00-u < *
siemens desigo pxc001-e.d < *
siemens desigo pxc100-e.d < *
siemens desigo pxc12-e.d < *
siemens desigo pxc128-u < *
siemens desigo pxc200-e.d < *
siemens desigo pxc22-e.d < *
siemens desigo pxc22.1-e.d < *
siemens desigo pxc36.1-e.d < *
siemens desigo pxc50-e.d < *
siemens desigo pxc64-u < *
siemens desigo pxm20-e < *
Original advisory text
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo...
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versions >= V2.3), Desigo PXC12-E.D (All versions >= V2.3), Desigo PXC128-U (All versions >= V2.3), Desigo PXC200-E.D (All versions >= V2.3), Desigo PXC22-E.D (All versions >= V2.3), Desigo PXC22.1-E.D (All versions >= V2.3), Desigo PXC36.1-E.D (All versions >= V2.3), Desigo PXC50-E.D (All versions >= V2.3), Desigo PXC64-U (All versions >= V2.3), Desigo PXM20-E (All versions >= V2.3). The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published13 Oct 2026
Updated4 Nov 2026
First seen13 Oct 2026
Sources
CVE-2026-89208 · NVD
CVE-2026-89208 · MITRE
Track software like this
Free during beta