← All Advisories

CVE-2026-44415

Last refreshed2026-10-13

Status: UPDATED  |  Advisory ID: CVE-2026-44415

Key Details

CVECVE-2026-44415
CVSS Score / Version
9.1 (Critical) / CVSS v3.1
Updated2026-10-13
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-35 (Path Traversal: '.../...//')

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
SiemensSIMATIC HMI MTP1000 Unified Comfort Panel
SiemensSIMATIC HMI MTP1000 Unified Comfort Panel hygienic
SiemensSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design
SiemensSIMATIC HMI MTP1000, Unified Comfort Panel neutral
SiemensSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit
SiemensSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP1200 Unified Comfort Panel
SiemensSIMATIC HMI MTP1200 Unified Comfort Panel hygienic
SiemensSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design
SiemensSIMATIC HMI MTP1200 Unified Comfort Panel neutral design
SiemensSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit
SiemensSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP1500 Unified Comfort Panel
SiemensSIMATIC HMI MTP1500 Unified Comfort Panel hygienic
SiemensSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design
SiemensSIMATIC HMI MTP1500 Unified Comfort Panel neutral design
SiemensSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit
SiemensSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP1900 Unified Comfort Panel
SiemensSIMATIC HMI MTP1900 Unified Comfort Panel hygienic
SiemensSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design
SiemensSIMATIC HMI MTP1900 Unified Comfort Panel neutral design
SiemensSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit
SiemensSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom)
SiemensSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top)
SiemensSIMATIC HMI MTP2200 Unified Comfort Hygienic
SiemensSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design
SiemensSIMATIC HMI MTP2200 Unified Comfort Panel
SiemensSIMATIC HMI MTP2200 Unified Comfort Panel neutral design
SiemensSIMATIC HMI MTP700 Unified Comfort Panel
SiemensSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design
SiemensSIMATIC HMI MTP700, Unified Comfort Panel neutral design
SiemensSIPLUS HMI MTP1000 Unified Comfort
SiemensSIPLUS HMI MTP1200 Unified Comfort
SiemensSIPLUS HMI MTP700 Unified Comfort
SiemensIndustrial Edge Device Kit - arm64 V1.10
SiemensIndustrial Edge Device Kit - arm64 V1.11
SiemensIndustrial Edge Device Kit - arm64 V1.12
SiemensIndustrial Edge Device Kit - arm64 V1.13
SiemensIndustrial Edge Device Kit - arm64 V1.14
SiemensIndustrial Edge Device Kit - arm64 V1.15
SiemensIndustrial Edge Device Kit - arm64 V1.16
SiemensIndustrial Edge Device Kit - arm64 V1.17
SiemensIndustrial Edge Device Kit - arm64 V1.18
SiemensIndustrial Edge Device Kit - arm64 V1.19
SiemensIndustrial Edge Device Kit - arm64 V1.20
SiemensIndustrial Edge Device Kit - arm64 V1.21
SiemensIndustrial Edge Device Kit - arm64 V1.22
SiemensIndustrial Edge Device Kit - arm64 V1.23
SiemensIndustrial Edge Device Kit - arm64 V1.24
SiemensIndustrial Edge Device Kit - arm64 V1.25
SiemensIndustrial Edge Device Kit - arm64 V1.26
SiemensIndustrial Edge Device Kit - arm64 V1.27
SiemensIndustrial Edge Device Kit - arm64 V1.28
SiemensIndustrial Edge Device Kit - arm64 V1.5
SiemensIndustrial Edge Device Kit - arm64 V1.6
SiemensIndustrial Edge Device Kit - arm64 V1.7
SiemensIndustrial Edge Device Kit - arm64 V1.8
SiemensIndustrial Edge Device Kit - arm64 V1.9
SiemensIndustrial Edge Device Kit - x86-64 V1.10
SiemensIndustrial Edge Device Kit - x86-64 V1.11
SiemensIndustrial Edge Device Kit - x86-64 V1.12
SiemensIndustrial Edge Device Kit - x86-64 V1.13
SiemensIndustrial Edge Device Kit - x86-64 V1.14
SiemensIndustrial Edge Device Kit - x86-64 V1.15
SiemensIndustrial Edge Device Kit - x86-64 V1.16
SiemensIndustrial Edge Device Kit - x86-64 V1.17
SiemensIndustrial Edge Device Kit - x86-64 V1.18
SiemensIndustrial Edge Device Kit - x86-64 V1.19
SiemensIndustrial Edge Device Kit - x86-64 V1.20
SiemensIndustrial Edge Device Kit - x86-64 V1.21
SiemensIndustrial Edge Device Kit - x86-64 V1.22
SiemensIndustrial Edge Device Kit - x86-64 V1.23
SiemensIndustrial Edge Device Kit - x86-64 V1.24
SiemensIndustrial Edge Device Kit - x86-64 V1.25
SiemensIndustrial Edge Device Kit - x86-64 V1.26
SiemensIndustrial Edge Device Kit - x86-64 V1.27
SiemensIndustrial Edge Device Kit - x86-64 V1.28
SiemensIndustrial Edge Device Kit - x86-64 V1.5
SiemensIndustrial Edge Device Kit - x86-64 V1.6
SiemensIndustrial Edge Device Kit - x86-64 V1.7
SiemensIndustrial Edge Device Kit - x86-64 V1.8
SiemensIndustrial Edge Device Kit - x86-64 V1.9
SiemensSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension
SiemensSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension
SiemensSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension
SiemensSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension
SubsystemsSupervisory Control & Operations Platforms
SectorsMultiple

What to Know

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data. (NVD)

What to Do

Monitor Siemens's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44415
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44415

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE