Siemens Industrial Edge Management Security Bypass Vulnerability

CERT-Bund published a security advisory documenting a medium-severity vulnerability (CVSS Base Score 4.7) in Siemens Industrial Edge Management that allows remote, anonymous attackers to bypass security measures. The vulnerability affects Industrial Edge Management Pro versions prior to 1.15.17 and 2.1.1, and Virtual versions prior to 2.8.0. The advisory confirms mitigations are available.

Organizations using Siemens Industrial Edge Management products should assess whether their deployments are affected, implement available mitigations, and monitor for updates from Siemens and CERT-Bund. As the affected products manage applications and data on edge devices in industrial environments, operators of industrial control systems and manufacturing facilities should prioritize reviewing this advisory.