9.1
Critique
CVE-2026-44415 Affected systems do not properly restrict access to internal APIs and paths for authenticated users
Description
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Industrial Edge Device Kit - arm64 V1.10 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.11 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.12 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.13 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.14 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.15 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.16 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.17 | Versions non publiées | |
| Industrial Edge Device Kit - arm64 V1.18 | Versions non publiées |
Afficher les 89 autres branches Masquer les 89 autres branches
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification