Multiple Path Traversal Vulnerabilities Found in Siemens Industrial Edge Devices
Siemens Industrial Edge Devices are affected by multiple path traversal vulnerabilities, potentially allowing authenticated remote attackers to access sensitive internal information.
Siemens has issued a security advisory detailing multiple path traversal vulnerabilities impacting its Industrial Edge Devices. These flaws, identified under CVE-2026-44414 and CVE-2026-44415, could be exploited by an authenticated remote attacker to gain unauthorized access to sensitive internal system information.
The vulnerabilities specifically affect several product lines within the Siemens Industrial Edge ecosystem. These include the Industrial Edge Cloud Device (IECD), Industrial Edge Own Device (IEOD), and Industrial Edge Virtual Device (IEVD), all with affected versions prior to 1.28.1 for CVE-2026-44414. Additionally, SCALANCE LPE9413 and SCALANCE LPE9433 devices are also impacted by CVE-2026-44414 across all versions.
A significant number of SIMATIC HMI MTP Unified Comfort Panel devices are also affected by CVE-2026-44415. This includes various models such as the MTP1000, MTP1200, MTP1500, MTP1900, and MTP2200 series, across different configurations like "Comfort Pro," "hygienic," and "neutral design," and for various mounting options including stand and support arm.
Path traversal, also known as directory traversal, is a web security vulnerability that allows attackers to access files and directories that are outside of the web root folder. By manipulating input parameters that reference files with "../" sequences, an attacker can trick the application into accessing arbitrary files on the server's file system. In this case, the exploitation could lead to the disclosure of sensitive internal data.
Siemens has responded by releasing updated versions for several of the affected products. The company strongly recommends that users update to the latest available versions to patch these vulnerabilities. For products where fixes are not yet available or are still under development, Siemens has provided specific mitigation recommendations to help customers reduce their risk exposure.
While the advisory does not detail specific in-the-wild exploitation, the nature of these vulnerabilities in industrial edge devices warrants prompt attention. Compromise of these systems could potentially lead to disruptions in operational technology (OT) environments, which are critical for manufacturing, energy, and other industrial sectors.
Users are advised to consult the official Siemens security advisory and CISA's ICS-CERT advisory for detailed information on affected versions, remediation steps, and recommended mitigations. Proactive patching and implementation of security best practices are crucial for maintaining the integrity and security of industrial control systems.
This advisory from CISA details specific affected versions of the Siemens Industrial Edge Device Kit, including numerous arm64 and x86-64 variants prior to 1.26.2.1, 1.27.1.1, and 1.28.0.6. It also highlights that while Siemens has released updated versions, fixes are not planned for some older versions, recommending specific countermeasures for those instances.