Full Report
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
Analysis Summary
# Vulnerability: Path Traversal in Siemens Industrial Edge Device Kit
## CVE Details
- **CVE ID:** CVE-2026-44414, CVE-2026-44415
- **CVSS Score:**
- CVE-2026-44415: 9.1 (Critical) / CVSS v4.0: 8.9
- CVE-2026-44414: 6.8 (Medium) / CVSS v4.0: 6.9
- **CWE:** CWE-35: Path Traversal
## Affected Systems
- **Products:** Industrial Edge Device Kit (arm64)
- **Versions:** V1.5, V1.6, V1.7, V1.8, V1.9, V1.10, V1.11, V1.12, and V1.13.
- **Configurations:** Systems utilizing these device kit versions to build Industrial Edge Devices.
## Vulnerability Description
The Industrial Edge Device Kit contains multiple path traversal vulnerabilities due to improper restriction of access to internal APIs and system paths.
- **CVE-2026-44414:** Allows an authenticated remote attacker to bypass path restrictions to access sensitive internal information.
- **CVE-2026-44415:** A more severe flaw where the path traversal allows an authenticated remote attacker to not only read sensitive information but also potentially delete data or gain unauthorized system access.
## Exploitation
- **Status:** Not exploited (No reports of active exploitation or public PoC in provided text).
- **Complexity:** Low (requires authentication but follows a standard path traversal pattern).
- **Attack Vector:** Network
## Impact
- **Confidentiality:** High (Access to sensitive internal system information).
- **Integrity:** High (CVE-2026-44415 allows for data deletion).
- **Availability:** High (Potential for system-wide unauthorized access or data loss).
## Remediation
### Patches
- Siemens has released new versions for several affected products. Users are advised to update to the latest version lines that have received updates or were released with fixes included.
- Version lines that are no longer maintained should be migrated to newer, supported version lines.
### Workarounds
- **Limit Access:** Restrict access to the Industrial Edge Device APIs and management interfaces to trusted users and networks only.
- **Consult Specific Advisories:** Users of Siemens Industrial Edge devices should refer to the specific advisory for their hardware (SSA-832641).
## Detection
- **Indicators of Compromise:** Unusual API requests containing traversal patterns (e.g., `../`, `..//`, or `.../`).
- **Detection methods and tools:** Monitor audit logs for authenticated sessions performing unauthorized file system access or unexpected API calls to internal paths.
## References
- Siemens Advisory SSA-377139: hxxps://cert-portal.siemens[.]com/productcert/html/ssa-377139.html
- Downstream Siemens Device Advisory: hxxps://cert-portal.siemens[.]com/productcert/html/ssa-832641.html
- Siemens ProductCERT: hxxps://www.siemens[.]com/cert/advisories