CVE-2026-33892

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-33892", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "state": "PUBLISHED", "assignerShortName": "siemens", "dateReserved": "2026-03-24T15:32:19.390Z", "datePublished": "2026-04-14T08:40:46.807Z", "dateUpdated": "2026-04-14T13:46:34.636Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-04-14T08:40:46.807Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Management Virtual (All versions >= V2.2.0 < V2.8.0). Affected management systems do not properly enforce user authentication on remote connections to devices.\r\nThis could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.\r\nSuccessful exploitation requires that the attacker has identified the header and port used for remote connections to devices and that the remote connection feature is enabled for the device.\r\n\r\nExploitation allows the attacker to tunnel to the device. Security features on this device itself (e.g. app specific authentication) are not affected."}], "affected": [{"vendor": "Siemens", "product": "Industrial Edge Management Pro V1", "versions": [{"status": "affected", "version": "V1.7.6", "lessThan": "V1.15.17", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Industrial Edge Management Pro V2", "versions": [{"status": "affected", "version": "V2.0.0", "lessThan": "V2.1.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Industrial Edge Management Virtual", "versions": [{"status": "affected", "version": "V2.2.0", "lessThan": "V2.8.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "baseScore": 7.1, "baseSeverity": "HIGH"}}, {"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L", "baseScore": 5.1, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-305", "description": "CWE-305: Authentication Bypass by Primary Weakness", "type": "CWE"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-609469.html"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-14T13:46:06.348573Z", "id": "CVE-2026-33892", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T13:46:34.636Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-33892", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-14T13:46:06.348573Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-14T13:46:31.635Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"}}, {"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L"}}], "affected": [{"vendor": "Siemens", "product": "Industrial Edge Management Pro V1", "versions": [{"status": "affected", "version": "V1.7.6", "lessThan": "V1.15.17", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Industrial Edge Management Pro V2", "versions": [{"status": "affected", "version": "V2.0.0", "lessThan": "V2.1.1", "versionType": "custom"}], "defaultStatus": "unknown"}, {"vendor": "Siemens", "product": "Industrial Edge Management Virtual", "versions": [{"status": "affected", "version": "V2.2.0", "lessThan": "V2.8.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-609469.html"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Management Virtual (All versions >= V2.2.0 < V2.8.0). Affected management systems do not properly enforce user authentication on remote connections to devices.\r\nThis could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.\r\nSuccessful exploitation requires that the attacker has identified the header and port used for remote connections to devices and that the remote connection feature is enabled for the device.\r\n\r\nExploitation allows the attacker to tunnel to the device. Security features on this device itself (e.g. app specific authentication) are not affected."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-305", "description": "CWE-305: Authentication Bypass by Primary Weakness"}]}], "providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2026-04-14T08:40:46.807Z"}}}, "cveMetadata": {"cveId": "CVE-2026-33892", "state": "PUBLISHED", "dateUpdated": "2026-04-14T13:46:34.636Z", "dateReserved": "2026-03-24T15:32:19.390Z", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "datePublished": "2026-04-14T08:40:46.807Z", "assignerShortName": "siemens"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Industrial Edge Management Pro V1", "vendor": "Siemens", "versions": [{"lessThan": "V1.15.17", "status": "affected", "version": "V1.7.6", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Industrial Edge Management Pro V2", "vendor": "Siemens", "versions": [{"lessThan": "V2.1.1", "status": "affected", "version": "V2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "product": "Industrial Edge Management Virtual", "vendor": "Siemens", "versions": [{"lessThan": "V2.8.0", "status": "affected", "version": "V2.2.0", "versionType": "custom"}]}], "source": "productcert@siemens.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Management Virtual (All versions >= V2.2.0 < V2.8.0). Affected management systems do not properly enforce user authentication on remote connections to devices.\r\nThis could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.\r\nSuccessful exploitation requires that the attacker has identified the header and port used for remote connections to devices and that the remote connection feature is enabled for the device.\r\n\r\nExploitation allows the attacker to tunnel to the device. Security features on this device itself (e.g. app specific authentication) are not affected."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Industrial Edge Management Pro V1 (Todas las versiones >= V1.7.6 anterior a V1.15.17), Industrial Edge Management Pro V2 (Todas las versiones >= V2.0.0 anterior a V2.1.1), Industrial Edge Management Virtual (Todas las versiones >= V2.2.0 anterior a V2.8.0). Los sistemas de gesti\u00f3n afectados no aplican correctamente la autenticaci\u00f3n de usuario en las conexiones remotas a dispositivos.\nEsto podr\u00eda facilitar que un atacante remoto no autenticado eluda la autenticaci\u00f3n e suplante a un usuario leg\u00edtimo.\nLa explotaci\u00f3n exitosa requiere que el atacante haya identificado el encabezado y el puerto utilizados para las conexiones remotas a dispositivos y que la funci\u00f3n de conexi\u00f3n remota est\u00e9 habilitada para el dispositivo. La explotaci\u00f3n permite al atacante tunelizar al dispositivo. Las caracter\u00edsticas de seguridad en este propio dispositivo (por ejemplo, autenticaci\u00f3n espec\u00edfica de la aplicaci\u00f3n) no se ven afectadas."}], "id": "CVE-2026-33892", "lastModified": "2026-10-24T13:10:00.147", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.7, "source": "productcert@siemens.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "productcert@siemens.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33892", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-14T13:46:06.348573Z", "version": "2.0.3"}}]}, "published": "2026-04-14T09:16:36.097", "references": [{"source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-609469.html"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-305"}], "source": "productcert@siemens.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[V1.7.6,V1.15.17)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[V2.0.0,V2.1.1)"}}], "enrichment": {"confidence": 96.0, "confidence_source": "matching", "scores": [{"score": 96.0, "source": "matching"}]}, "original": {"product": "Industrial Edge Management Pro V1", "source": "cna", "vendor": "Siemens"}, "product": "industrial_edge_management_pro", "vendor": "siemens"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[V2.2.0,V2.8.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Industrial Edge Management Virtual", "source": "cna", "vendor": "Siemens"}, "product": "industrial_edge_management_virtual", "vendor": "siemens"}], "analysis": {"en": {"generated_at": "2026-04-14T10:20:42.299629+00:00", "value": {"mitigation_remediation": ["Apply the latest Siemens patch that enforces authentication on all remote connection endpoints.", "If remote connections are not required, disable the remote connection feature on the affected devices.", "Verify that only authorized users have valid credentials for remote access and enforce strong authentication policies.", "Monitor system logs for suspicious connection attempts and block offending IPs or endpoints.", "Frequently check Siemens\u2019 advisory portal for updates and additional guidance."], "summary": {"action": "Apply Patch", "impact": "Authentication Bypass via Remote Connections"}, "threat_synthesis": {"affected_systems": "Siemens Industrial Edge Management Pro V1, affected versions ranging from all releases starting at version 1.7.6 up to but not including 1.15.17; Siemen\u2019s Industrial Edge Management Pro V2, affected versions from 2.0.0 up to but not including 2.1.1; and Siemens Industrial Edge Management Virtual, affected versions from 2.2.0 through 2.7.9. These products are used to manage industrial edge devices and require careful protection of remote access channels.", "description_and_impact": "The vulnerability exists because the Industrial Edge Management systems do not enforce user authentication on remote connections to devices. An attacker who can identify the specific header and port used for these connections, and for which the remote connection feature is enabled, can bypass authentication and impersonate a legitimate user. This allows the attacker to establish a tunneled session to the target device, effectively gaining remote access without needing valid credentials. The security controls that exist on the device itself, such as application\u2011level authentication, remain unaffected by this bypass.", "risk_and_exploitability": "The CVSS score of 5.1 indicates a medium severity. Exploitation requires knowledge of the device\u2019s remote connection header, port, and an enabled remote connection feature, but does not require any local privileges or elevated rights on the management system. EPSS data is unavailable, and the vulnerability is not listed in CISA\u2019s KEV catalog, suggesting a lower frequency of known exploits. The likely attack vector is a remote network connection from an adversary who can reach the device\u2019s designated port. Attackers could potentially tunnel into the device, potentially allowing further lateral movement or unauthorized configuration changes."}}}}, "created": "2026-04-14T16:15:40.397871+00:00", "title": "Authentication Bypass via Remote Connections in Siemens Industrial Edge Management", "updated": "2026-04-14T16:30:37.480771+00:00", "vendors": ["siemens", "siemens$PRODUCT$industrial_edge_management_pro", "siemens$PRODUCT$industrial_edge_management_virtual"]}