جزئیات آسیب‌پذیری
CVE-2026-44415
Siemens Industrial Edge Device Kit - arm64Siemens Industrial Edge Device Kit - x86-64Siemens SIMATIC HMI MTP1000 Unified Comfort PanelSiemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienicSiemens SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral designSiemens SIMATIC HMI MTP1000
CVSS 4.0
8.9بالا
شرح رسمی (انگلیسی)
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.9بالا | 4.0 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
| 9.1بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (siemens) | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Siemens | Industrial Edge Device Kit - arm64 V1.10 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.11 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.12 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.13 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.14 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.15 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.16 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.21 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.22 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.23 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.24 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.25 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.26 | v < V1.26.2-1 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.27 | v < V1.27.1-1 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.28 | v < V1.28.0-6 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.5 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.7 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.8 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - arm64 V1.9 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.10 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.11 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.12 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.13 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.14 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.15 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.16 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.17 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.18 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.19 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.20 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.21 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.22 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.23 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.24 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.25 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.26 | v < V1.26.2-1 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.27 | v < V1.27.1-1 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.28 | v < V1.28.0-6 | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.5 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.6 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.7 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.8 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | Industrial Edge Device Kit - x86-64 V1.9 | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1000, Unified Comfort Panel neutral | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1200 Unified Comfort Panel neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1500 Unified Comfort Panel neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP1900 Unified Comfort Panel neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Hygienic | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Panel | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP2200 Unified Comfort Panel neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700, Unified Comfort Panel neutral design | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC HMI MTP700 Unified Comfort Panel | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS HMI MTP1000 Unified Comfort | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS HMI MTP1200 Unified Comfort | همه | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS HMI MTP700 Unified Comfort | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲
کانال تلگرام کُلون @kolunsec_fa
تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۷/۲۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۷/۲۲
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- siemens
پیش‌بینی بهره‌برداری (EPSS)
۰٫۴۷٪
احتمال بهره‌برداری در ۳۰ روز
۴۱٫۴٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-35Path Traversal: '.../...//'