Siemens Industrial Edge Path Traversal Vulnerability (CVE-2026-44414) Advisory

Vulnerability Overview Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities, which may allow unauthorized remote attackers to access sensitive internal information. Affected Products Industrial Edge Cloud Device (IECD) - All versions < V1.28.1 - Affected by CVE-2026-44414 Industrial Edge Own Device (IEOD) - All versions < V1.28.1 - Affected by CVE-2026-44414 Industrial Edge Virtual Device (IEVD) - All versions < V1.28.1 - Affected by CVE-2026-44414 SCALANCE LPE9413 (6GK5998-3DS01-2AC2) - All versions - Affected by CVE-2026-44414 SCALANCE LPE9433 (6GK5998-3DS11-2AC2) - All versions - Affected by CVE-2026-44414 SIMATIC HMI Operator Device - All versions - Affected by CVE-2026-44414 SIMATIC IOT2050 Advanced IED (6ES7647-8BW00-1YA2) - All versions < V1.28.1-2 - Affected by CVE-2026-44414 SIMATIC IOT2050 SM IED (6ES7647-8CW00-1AA2) - All versions < V1.28.1-2 - Affected by CVE-2026-44414 SIMATIC IPC127E Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 SIMATIC IPC227E Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 SIMATIC IPC227G Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 SIMATIC IPC427E Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 SIMATIC IPC647E Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 SIMATIC IPC BX-21A Industrial Edge Device - All versions < V1.28.1-2 - Affected by CVE-2026-44414 SIMATIC IPC BX-39A Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 SIMATIC IPC BX-58A Industrial Edge Device - All versions < V3.2.0-17 - Affected by CVE-2026-44414 Resolution Industrial Edge Cloud Device (IECD) - Update to V1.28.1 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V1.28.1/industrial-edge-virtual/cloud-device/release-notes Industrial Edge Own Device (IEOD) - Update to V1.28.1 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V1.28.1/industrial-edge-own/device/release-notes Industrial Edge Virtual Device (IEVD) - Update to V1.28.1 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V1.28.1/industrial-edge-virtual/cloud-device/release-notes SCALANCE LPE9413 (6GK5998-3DS01-2AC2) - No resolution available at this time SCALANCE LPE9433 (6GK5998-3DS11-2AC2) - No resolution available at this time SIMATIC HMI Operator Device - No resolution available at this time SIMATIC IOT2050 Advanced IED (6ES7647-8BW00-1YA2) - Update to V1.28.1-2 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V1.28.0/ie-iot-simatic-iot2050-industrial-edge-device/release-notes/release-notes-v1.28 SIMATIC IOT2050 SM IED (6ES7647-8CW00-1AA2) - Update to V1.28.1-2 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V1.28.0/ie-iot-simatic-iot2050-industrial-edge-device/release-notes/release-notes-v1.28 SIMATIC IPC127E Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 SIMATIC IPC227E Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 SIMATIC IPC227G Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 SIMATIC IPC427E Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 SIMATIC IPC647E Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 SIMATIC IPC BX-21A Industrial Edge Device - Update to V1.28.1-2 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V1.28.0/ie-iot-simatic-ipc-industrial-edge-device/ie/release-notes/release-notes-v1.28 SIMATIC IPC BX-39A Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 SIMATIC IPC BX-58A Industrial Edge Device - Update to V3.2.0-17 or later - Reference link: https://docs.industrial.operations.siemens.cloud/en-us/V3.2/simatic-ipc-ied/ie/release-notes/release-notes-v3.2 Additional Information CVSS v3.1 Base Score: 9.1 CVSS v4.0 Base Score: 8.9 General Security Recommendations Ensure network access is restricted to trusted partners. Configure the environment according to Siemens' operational guidelines. Follow the recommendations provided in the product manuals. Extra Information For more information on security vulnerabilities, please contact

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Industrial Edge Path Traversal Vulnerability (CVE-2026-44414) Advisory