Industrial Edge Device Kit - arm64 V1.6 vulnerabilities

2 known vulnerabilities in Industrial Edge Device Kit - arm64 V1.6 from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Industrial Edge Device Kit - arm64 V1.10: Path Traversal: '.../...//'

  CVE-2026-44415Oct 13, 2026Siemens

  Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthoriz

• 10.0 Critical severity

  Industrial Edge Cloud Device (IECD): Authorization Bypass Through User-Controlled Key

  CVE-2025-40805Jan 13, 2026Siemens

  Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker