Siemens SIMATIC IoT2050 Advanced
SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC IoT2050 Advanced and strongly recommends to update to the latest version. The following versions of Siemens SIMATIC IoT2050 Advanced are affected: SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) vers:intdot/ CVSS Vendor Equip
Read at CISA Cybersecurity Advisories
- Vendor
- Siemens
- Product
- SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal, Smart home / IoT platforms
- CVSS
- 3.1
- Fix
- available
- Exposure class
- OT / ICS
Why it ranks 26 (Notable)
- Product class: OT / ICS
- Covered by 2 independent sources
- Fix available
- Government advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- CISA Cybersecurity Advisories (cisa.gov)
- CVE-2026-58115 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.