Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.

66 Affected Products

Industrial Edge Cloud Device (IECD) < V1.28.1

Product Status: known_affected

Remediations

Industrial Edge Own Device (IEOD) < V1.28.1

Product Status: known_affected

Remediations

Industrial Edge Virtual Device (IEVD) < V1.28.1

Product Status: known_affected

Remediations

SCALANCE LPE9413 (6GK5998-3GS01-2AC2)

Product Status: known_affected

Remediations

SCALANCE LPE9433 (6GK5998-3GS11-2AC2)

Product Status: known_affected

Remediations

SIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2) < V1.28.1-2

Product Status: known_affected

Remediations

SIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2) < V1.28.1-2

Product Status: known_affected

Remediations

SIMATIC IPC BX-21A…