Back to the CVE list
CVE-2026-44415

Vulnerability in Siemens Industrial Edge Device Kit Arm64 V1.10

CVSS score

9.1

EPSS probability

—

Risk score

0.9

Published

10 h ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

CVE AI research

The stored explanation is shown at once; refreshing evaluates the sources again.

DayBreach AI Explanation

Verified against sources

Critical API Security Vulnerability in Siemens Industrial Edge Device Kit

Sources read

2

Source agreement

Tam uyum

Evidence confidence

%63

Short explanation

A critical vulnerability exists in Siemens Industrial Edge Device Kit products due to improper restriction of access to internal APIs and paths for authenticated users.

Why does it matter?

It poses a severe risk as it allows an authenticated remote attacker to access sensitive information, facilitate unauthorized system access, or result in data deletion.

What should be done?

  • Follow official Siemens security advisories
  • Review vendor announcements for product updates
Chain of evidence and sources2 verified claims

Etkilenen sistemler, kimliği doğrulanmış kullanıcılar için iç API'lere ve yollara erişimi düzgün kısıtlamamaktadır.

S0 · daybreach-canonicalS1 · cvelistS2 · nvd

Güvenlik açığı, kimliği doğrulanmış uzaktan bir saldırganın hassas bilgilere erişmesine veya veri silmesine neden olabilir.

S0 · daybreach-canonicalS1 · cvelistS2 · nvd
Show the technical text from the sources

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE: CWE-35

Explanation produced with the local gemini-flash-lite-latest model. Numerical metrics and the KEV, patch and exploit statuses are not determined by AI.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-44415 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1siemensIndustrial Edge Device Kit - arm64 V1.10 View
2siemensIndustrial Edge Device Kit - arm64 V1.11 View
3siemensIndustrial Edge Device Kit - arm64 V1.12 View
4siemensIndustrial Edge Device Kit - arm64 V1.13 View
5siemensIndustrial Edge Device Kit - arm64 V1.14 View
6siemensIndustrial Edge Device Kit - arm64 V1.15 View
7siemensIndustrial Edge Device Kit - arm64 V1.16 View
8siemensIndustrial Edge Device Kit - arm64 V1.17 View
9siemensIndustrial Edge Device Kit - arm64 V1.18 View
10siemensIndustrial Edge Device Kit - arm64 V1.19 View
11siemensIndustrial Edge Device Kit - arm64 V1.20 View
12siemensIndustrial Edge Device Kit - arm64 V1.21 View
13siemensIndustrial Edge Device Kit - arm64 V1.22 View
14siemensIndustrial Edge Device Kit - arm64 V1.23 View
15siemensIndustrial Edge Device Kit - arm64 V1.24 View
16siemensIndustrial Edge Device Kit - arm64 V1.25 View
17siemensIndustrial Edge Device Kit - arm64 V1.26 View
18siemensIndustrial Edge Device Kit - arm64 V1.27 View
19siemensIndustrial Edge Device Kit - arm64 V1.28 View
20siemensIndustrial Edge Device Kit - arm64 V1.5 View
21siemensIndustrial Edge Device Kit - arm64 V1.6 View
22siemensIndustrial Edge Device Kit - arm64 V1.7 View
23siemensIndustrial Edge Device Kit - arm64 V1.8 View
24siemensIndustrial Edge Device Kit - arm64 V1.9 View
25siemensIndustrial Edge Device Kit - x86-64 V1.10 View
26siemensIndustrial Edge Device Kit - x86-64 V1.11 View
27siemensIndustrial Edge Device Kit - x86-64 V1.12 View
28siemensIndustrial Edge Device Kit - x86-64 V1.13 View
29siemensIndustrial Edge Device Kit - x86-64 V1.14 View
30siemensIndustrial Edge Device Kit - x86-64 V1.15 View
31siemensIndustrial Edge Device Kit - x86-64 V1.16 View
32siemensIndustrial Edge Device Kit - x86-64 V1.17 View
33siemensIndustrial Edge Device Kit - x86-64 V1.18 View
34siemensIndustrial Edge Device Kit - x86-64 V1.19 View
35siemensIndustrial Edge Device Kit - x86-64 V1.20 View
36siemensIndustrial Edge Device Kit - x86-64 V1.21 View
37siemensIndustrial Edge Device Kit - x86-64 V1.22 View
38siemensIndustrial Edge Device Kit - x86-64 V1.23 View
39siemensIndustrial Edge Device Kit - x86-64 V1.24 View
40siemensIndustrial Edge Device Kit - x86-64 V1.25 View
41siemensIndustrial Edge Device Kit - x86-64 V1.26 View
42siemensIndustrial Edge Device Kit - x86-64 V1.27 View
43siemensIndustrial Edge Device Kit - x86-64 V1.28 View
44siemensIndustrial Edge Device Kit - x86-64 V1.5 View
45siemensIndustrial Edge Device Kit - x86-64 V1.6 View
46siemensIndustrial Edge Device Kit - x86-64 V1.7 View
47siemensIndustrial Edge Device Kit - x86-64 V1.8 View
48siemensIndustrial Edge Device Kit - x86-64 V1.9 View
49siemensSIMATIC HMI MTP1000 Unified Comfort Panel View
50siemensSIMATIC HMI MTP1000 Unified Comfort Panel hygienic View
51siemensSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design View
52siemensSIMATIC HMI MTP1000, Unified Comfort Panel neutral View
53siemensSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) View
54siemensSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit View
55siemensSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) View
56siemensSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) View
57siemensSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension View
58siemensSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) View
59siemensSIMATIC HMI MTP1200 Unified Comfort Panel View
60siemensSIMATIC HMI MTP1200 Unified Comfort Panel hygienic View
61siemensSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design View
62siemensSIMATIC HMI MTP1200 Unified Comfort Panel neutral design View
63siemensSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) View
64siemensSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit View
65siemensSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) View
66siemensSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) View
67siemensSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension View
68siemensSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) View
69siemensSIMATIC HMI MTP1500 Unified Comfort Panel View
70siemensSIMATIC HMI MTP1500 Unified Comfort Panel hygienic View
71siemensSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design View
72siemensSIMATIC HMI MTP1500 Unified Comfort Panel neutral design View
73siemensSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) View
74siemensSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit View
75siemensSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) View
76siemensSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) View
77siemensSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension View
78siemensSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) View
79siemensSIMATIC HMI MTP1900 Unified Comfort Panel View
80siemensSIMATIC HMI MTP1900 Unified Comfort Panel hygienic View
81siemensSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design View
82siemensSIMATIC HMI MTP1900 Unified Comfort Panel neutral design View
83siemensSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) View
84siemensSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit View
85siemensSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) View
86siemensSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) View
87siemensSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension View
88siemensSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) View
89siemensSIMATIC HMI MTP2200 Unified Comfort Hygienic View
90siemensSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design View
91siemensSIMATIC HMI MTP2200 Unified Comfort Panel View
92siemensSIMATIC HMI MTP2200 Unified Comfort Panel neutral design View
93siemensSIMATIC HMI MTP700 Unified Comfort Panel View
94siemensSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design View
95siemensSIMATIC HMI MTP700, Unified Comfort Panel neutral design View
96siemensSIPLUS HMI MTP1000 Unified Comfort View
97siemensSIPLUS HMI MTP1200 Unified Comfort View
98siemensSIPLUS HMI MTP700 Unified Comfort View
Total affected vendors: 1|Products: 98

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
9.1CVSS V3_1CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HCVE CNA
9.1CVSS V31CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HNVD
8.9CVSS V4_0HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HCVE CNA
8.9CVSS V40HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-44415 is associated with the following CWEs:

CWE-35: Common Weakness Enumeration Entry CWE-35

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-44415 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://cert-portal.siemens.com/productcert/html/ssa-377139.htmlvendor-advisoryhttps://cert-portal.siemens.com/productcert/html/ssa-832641.htmlvendor-advisory

CVSS Vector Radar Chart

9.1 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

S
siemens logo
siemens

Weakness Type (CWE & CAPEC)

CWE-35

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-44415"
CVE-2026-44415 · Vulnerability in Siemens Industrial Edge Device Kit Arm64 V1.10 · DayBreach