Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-44414

Quick assessment

Affected
Siemens Industrial Edge Cloud Device (IECD)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

已在以下产品中识别出漏洞：Industrial Edge Cloud Device (IECD)、Industrial Edge Device Kit - arm64 V1.10、Industrial Edge Device Kit - arm64 V1.11、Industrial Edge Device Kit - arm64 V1.12、Industrial Edge Device Kit - arm64 V1.13、Industrial Edge Device Kit - arm64 V1.14、Indust

CVSS 6.8 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 63

VendorProduct Version RangeStatus
Siemens Industrial Edge Cloud Device (IECD) < V1.28.1 affected
Siemens Industrial Edge Device Kit - arm64 V1.10 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.11 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.12 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.13 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.14 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.15 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.16 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.17 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.18 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.19 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.20 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.21 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.22 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.23 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.24 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.25 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.26 < V1.26.2-1 affected
Siemens Industrial Edge Device Kit - arm64 V1.27 < V1.27.1-1 affected
Siemens Industrial Edge Device Kit - arm64 V1.28 < V1.28.0-6 affected
Siemens Industrial Edge Device Kit - arm64 V1.5 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.6 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.7 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.8 < * affected
Siemens Industrial Edge Device Kit - arm64 V1.9 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.10 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.11 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.12 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.13 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.14 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.15 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.16 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.17 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.18 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.19 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.20 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.21 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.22 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.23 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.24 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.25 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.26 < V1.26.2-1 affected
Siemens Industrial Edge Device Kit - x86-64 V1.27 < V1.27.1-1 affected
Siemens Industrial Edge Device Kit - x86-64 V1.28 < V1.28.0-6 affected
Siemens Industrial Edge Device Kit - x86-64 V1.5 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.6 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.7 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.8 < * affected
Siemens Industrial Edge Device Kit - x86-64 V1.9 < * affected
Siemens Industrial Edge Own Device (IEOD) < V1.28.1 affected
Siemens Industrial Edge Virtual Device (IEVD) < V1.28.1 affected
Siemens SCALANCE LPE9413 < * affected
Siemens SCALANCE LPE9433 < * affected
Siemens SIMATIC IoT2050 Advanced IED < V1.28.1-2 affected
Siemens SIMATIC IoT2050 SM IED < V1.28.1-2 affected
Siemens SIMATIC IPC BX-21A Industrial Edge Device < V1.28.1-2 affected
Siemens SIMATIC IPC BX-39A Industrial Edge Device < V3.2.0-17 affected
Siemens SIMATIC IPC BX-59A Industrial Edge Device < V3.2.0-17 affected
Siemens SIMATIC IPC127E Industrial Edge Device < V3.2.0-17 affected
Siemens SIMATIC IPC227E Industrial Edge Device < V3.2.0-17 affected
Siemens SIMATIC IPC227G Industrial Edge Device < V3.2.0-17 affected
Siemens SIMATIC IPC427E Industrial Edge Device < V3.2.0-17 affected
Siemens SIMATIC IPC847E Industrial Edge Device < V3.2.0-17 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-44414

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Industrial Edge Device Kit - arm64 V1.14, Industrial Edge Device Kit - arm64 V1.15, Industrial Edge Device Kit - arm64 V1.16, Industrial Edge Device Kit - arm64 V1.17, Industrial Edge Device Kit - arm64 V1.18, Industrial Edge Device Kit - arm64 V1.19, Industrial Edge Device Kit - arm64 V1.20, Industrial Edge Device Kit - arm64 V1.21, Industrial Edge Device Kit - arm64 V1.22, Industrial Edge Device Kit - arm64 V1.23, Industrial Edge Device Kit - arm64 V1.24, Industrial Edge Device Kit - arm64 V1.25, Industrial Edge Device Kit - arm64 V1.26, Industrial Edge Device Kit - arm64 V1.27, Industrial Edge Device Kit - arm64 V1.28, Industrial Edge Device Kit - arm64 V1.5, Industrial Edge Device Kit - arm64 V1.6, Industrial Edge Device Kit - arm64 V1.7, Industrial Edge Device Kit - arm64 V1.8, Industrial Edge Device Kit - arm64 V1.9, Industrial Edge Device Kit - x86-64 V1.10, Industrial Edge Device Kit - x86-64 V1.11, Industrial Edge Device Kit - x86-64 V1.12, Industrial Edge Device Kit - x86-64 V1.13, Industrial Edge Device Kit - x86-64 V1.14, Industrial Edge Device Kit - x86-64 V1.15, Industrial Edge Device Kit - x86-64 V1.16, Industrial Edge Device Kit - x86-64 V1.17, Industrial Edge Device Kit - x86-64 V1.18, Industrial Edge Device Kit - x86-64 V1.19, Industrial Edge Device Kit - x86-64 V1.20, Industrial Edge Device Kit - x86-64 V1.21, Industrial Edge Device Kit - x86-64 V1.22, Industrial Edge Device Kit - x86-64 V1.23, Industrial Edge Device Kit - x86-64 V1.24, Industrial Edge Device Kit - x86-64 V1.25, Industrial Edge Device Kit - x86-64 V1.26, Industrial Edge Device Kit - x86-64 V1.27, Industrial Edge Device Kit - x86-64 V1.28, Industrial Edge Device Kit - x86-64 V1.5, Industrial Edge Device Kit - x86-64 V1.6, Industrial Edge Device Kit - x86-64 V1.7, Industrial Edge Device Kit - x86-64 V1.8, Industrial Edge Device Kit - x86-64 V1.9, Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413 (6GK5998-3GS01-2AC2), SCALANCE LPE9433 (6GK5998-3GS11-2AC2), SIMATIC IoT2050 Advanced IED (6ES7647-0BW00-1YA2), SIMATIC IoT2050 SM IED (6ES7647-0CW00-1AA2), SIMATIC IPC BX-21A Industrial Edge Device, SIMATIC IPC BX-39A Industrial Edge Device, SIMATIC IPC BX-59A Industrial Edge Device, SIMATIC IPC127E Industrial Edge Device, SIMATIC IPC227E Industrial Edge Device, SIMATIC IPC227G Industrial Edge Device, SIMATIC IPC427E Industrial Edge Device, SIMATIC IPC847E Industrial Edge Device. Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
路径遍历：’…/…//’
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Siemens Industrial Edge Cloud Device (IECD) 0 ~ V1.28.1 -
Siemens Industrial Edge Device Kit - arm64 V1.10 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.11 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.12 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.13 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.14 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.15 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.16 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.17 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.18 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.19 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.20 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.21 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.22 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.23 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.24 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.25 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.26 0 ~ V1.26.2-1 -
Siemens Industrial Edge Device Kit - arm64 V1.27 0 ~ V1.27.1-1 -
Siemens Industrial Edge Device Kit - arm64 V1.28 0 ~ V1.28.0-6 -
Siemens Industrial Edge Device Kit - arm64 V1.5 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.6 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.7 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.8 0 ~ * -
Siemens Industrial Edge Device Kit - arm64 V1.9 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.10 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.11 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.12 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.13 0 ~ * -
Siemens Industrial Edge Device Kit - x86-64 V1.14 0 ~ * -

II. Public POCs for CVE-2026-44414

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-44414

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-44414 (2)

Same Patch Batch · Siemens · 2026-10-13 · 32 CVEs total

CVE-2026-63350 9.6 CRITICAL Siemens Trace文件解析漏洞，导致浏览器端JS执行
CVE-2026-63353 9.6 CRITICAL Siemens Trace文件XSS漏洞：恶意JS执行并越权操控PLC
CVE-2026-63354 9.6 CRITICAL Siemens PLCs XSS漏洞（读取诊断权限）
CVE-2026-44415 9.1 CRITICAL GitLab越权访问漏洞
CVE-2026-89197 8.8 HIGH RUGGEDCOM CROSSBOW V6.0以下版本SQL注入漏洞
CVE-2026-89198 8.8 HIGH RUGGEDCOM CROSSBOW<6.0任意SQL注入漏洞
CVE-2026-89199 8.8 HIGH RUGGEDCOM CROSSBOW < V6.0信息泄露漏洞
CVE-2026-89196 8.8 HIGH RUGGEDCOM CROSSBOW V6.0以下版本存在SQL注入漏洞
CVE-2026-59241 8.8 HIGH SIMATIC WinCC越权漏洞（CVE-2024-12345）
CVE-2026-78557 8.3 HIGH Industrial Edge App Publisher V1.27.9以下版本RCE漏洞
CVE-2026-102073 8.2 HIGH 艾礼富MBC/MEC/PXC/TALON远程内存读取及DoS
CVE-2026-72895 7.7 HIGH SIMATIC IPC系列安全启动绕过漏洞
CVE-2026-102076 7.5 HIGH Apogee系列软件Web服务拒绝服务漏洞
CVE-2026-85114 7.5 HIGH .NET Client Library <V3.3.61 路径遍历漏洞
CVE-2026-102075 7.5 HIGH Apogee/Talon设备Web服务DoS漏洞
CVE-2026-102074 7.5 HIGH Apogee系列软件FTP服务拒绝服务漏洞
CVE-2026-89201 7.5 HIGH RUGGEDCOM CROSSBOW <V6.0 SQL注入漏洞
CVE-2026-78556 7.4 HIGH Industrial Edge App Publisher TLS证书验证绕过漏洞
CVE-2026-89200 6.7 MEDIUM RUGGEDCOM CROSSBOW SQL注入漏洞
CVE-2026-89202 6.5 MEDIUM RUGGEDCOM CROSSBOW权限提升拒绝服务漏洞

Showing top 20 of 32 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Industrial Edge Cloud Device (IECD)
Same vendor: Siemens
Same weakness: CWE-35

V. Comments for CVE-2026-44414

No comments yet

Leave a comment