Vulnerabilidades do Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Siemens SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio: 2 registro(s), com versões afetadas e correções.
CVE-2026-27662
Alta · 7.7
CWE-1188 12/05/2026
Affected devices do not properly restrict access to the web browser via the Control Panel when no...
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place.
This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.
CVE-2025-40805
Crítica · 10.0
CWE-639 13/01/2026
Authorization Bypass Through User-Controlled Key (IDOR) em Siemens Industrial Edge Cloud Device (IECD)
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.