Siemens SIMATIC IoT2050 Advanced

View CSAF Summary SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released a new version for SIMATIC IoT2050 Advanced and strongly recommends to update to the latest version. The following versions of Siemens SIMATIC…

Číst originál na CISA Advisories →

CZ · EN/orig

Siemens energetika výroba a průmysl doprava US

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-58115	10.0 3.1 · siemens 10.0 4.0 · siemens	–	0.01

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.