Industrial Edge App Publisher
Monthly
Siemens Industrial Edge App Publisher versions below V1.27.9 fails to sanitize or escape data received from the backend before rendering it in its integrated Node.js front end, enabling injected JavaScript to execute with the client's privileges and escalate to remote code execution on the victim's machine. Exploitation requires an attacker to control or influence backend-delivered data and a victim to actively view that data in the vulnerable client, making this a targeted threat rather than opportunistic mass exploitation. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the vendor has released a patch in V1.27.9.
Siemens Industrial Edge App Publisher versions prior to V1.27.9 fail to validate the server certificate when establishing TLS connections, allowing an attacker who already occupies a privileged man-in-the-middle position on the network path to intercept, relay, and spoof trusted server communication. The flaw is unauthenticated from a credential standpoint (CVSS vector PR:N) but requires on-path access plus victim-initiated connection activity (AT:P, UI:P), so exploitation is constrained to environments where an adversary can insert themselves between the client and the intended server - a meaningful hurdle in segmented industrial networks where App Publisher normally operates. No public exploit code or in-the-wild activity has been identified at time of analysis, and the practical risk is medium-to-high rather than emergency priority: integrity and confidentiality of publisher-to-server traffic are fully exposed (C:H/I:H), while availability is unaffected (A:N).
Siemens Industrial Edge App Publisher versions below V1.27.9 fails to sanitize or escape data received from the backend before rendering it in its integrated Node.js front end, enabling injected JavaScript to execute with the client's privileges and escalate to remote code execution on the victim's machine. Exploitation requires an attacker to control or influence backend-delivered data and a victim to actively view that data in the vulnerable client, making this a targeted threat rather than opportunistic mass exploitation. No public exploit code or confirmed active exploitation has been identified at time of analysis, and the vendor has released a patch in V1.27.9.
Siemens Industrial Edge App Publisher versions prior to V1.27.9 fail to validate the server certificate when establishing TLS connections, allowing an attacker who already occupies a privileged man-in-the-middle position on the network path to intercept, relay, and spoof trusted server communication. The flaw is unauthenticated from a credential standpoint (CVSS vector PR:N) but requires on-path access plus victim-initiated connection activity (AT:P, UI:P), so exploitation is constrained to environments where an adversary can insert themselves between the client and the intended server - a meaningful hurdle in segmented industrial networks where App Publisher normally operates. No public exploit code or in-the-wild activity has been identified at time of analysis, and the practical risk is medium-to-high rather than emergency priority: integrity and confidentiality of publisher-to-server traffic are fully exposed (C:H/I:H), while availability is unaffected (A:N).