9.1
Critical
CVE-2026-44415 Affected systems do not properly restrict access to internal APIs and paths for authenticated users
Description
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Industrial Edge Device Kit - arm64 V1.10 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.11 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.12 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.13 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.14 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.15 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.16 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.17 | Versions not published | |
| Industrial Edge Device Kit - arm64 V1.18 | Versions not published |
Show the 89 other branches Hide the 89 other branches
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified