All CISA Advisories, EN

Siemens Industrial Edge Device Kit

View CSAF

Summary

Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

The following versions of Siemens Industrial Edge Device Kit are affected:

  • Industrial Edge Device Kit – arm64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – arm64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.10 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.11 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.12 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.13 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.14 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.15 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.16 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.17 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.18 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.19 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.20 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.21 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.22 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.23 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.24 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.25 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.26 vers:intdot/<1.26.2.1 (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.27 vers:intdot/<1.27.1.1 (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.28 vers:intdot/<1.28.0.6 (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.5 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.6 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.7 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.8 vers:all/* (CVE-2026-44414, CVE-2026-44415)
  • Industrial Edge Device Kit – x86-64 V1.9 vers:all/* (CVE-2026-44414, CVE-2026-44415)

CVSS
Vendor
Equipment

v3 9.1
Siemens
Industrial Edge Device Kit – arm64 V1.10

1 Vulnerability

Path Traversal: '…/…//'

Background

  • Critical Infrastructure

[…]
Content was trimmed to protect the source. Please visit the original article for the full text.

This article has been indexed from All CISA Advisories

Read the original article:

Siemens Industrial Edge Device Kit