Simatic Ipc847E Industrial Edge Device
Monthly
Improper restrictions on internal APIs and file paths in Siemens Industrial Edge deployments - the Industrial Edge Device Kits for arm64 and x86-64 from V1.5 through V1.28, Industrial Edge Cloud Device (IECD), Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413/LPE9433, SIMATIC IoT2050 variants and the SIMATIC IPC BX-21A/BX-39A/BX-59A, IPC127E, IPC227E, IPC227G, IPC427E and IPC847E edge devices - allow an authenticated remote user to reach internal endpoints and resources beyond their intended authorization and read sensitive internal information, which in the worst case can be leveraged to facilitate unauthorized access to the system. The vendor score is CVSS 6.8 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N), a confidentiality-only, scope-changing information-disclosure issue; the independent assessment reproduces the same vector but rates the privilege requirement as PR:L, so treating any authenticated user as a potential attacker is the safer assumption pending Siemens clarification. Exploitation requires network reachability to the device's management/internal API surface plus valid credentials, which in typical OT architectures confines risk to segmented industrial networks; no public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis, making this a moderate-priority hardening item rather than an emergency patch.
Improper restrictions on internal APIs and file paths in Siemens Industrial Edge deployments - the Industrial Edge Device Kits for arm64 and x86-64 from V1.5 through V1.28, Industrial Edge Cloud Device (IECD), Industrial Edge Own Device (IEOD), Industrial Edge Virtual Device (IEVD), SCALANCE LPE9413/LPE9433, SIMATIC IoT2050 variants and the SIMATIC IPC BX-21A/BX-39A/BX-59A, IPC127E, IPC227E, IPC227G, IPC427E and IPC847E edge devices - allow an authenticated remote user to reach internal endpoints and resources beyond their intended authorization and read sensitive internal information, which in the worst case can be leveraged to facilitate unauthorized access to the system. The vendor score is CVSS 6.8 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N), a confidentiality-only, scope-changing information-disclosure issue; the independent assessment reproduces the same vector but rates the privilege requirement as PR:L, so treating any authenticated user as a potential attacker is the safer assumption pending Siemens clarification. Exploitation requires network reachability to the device's management/internal API surface plus valid credentials, which in typical OT architectures confines risk to segmented industrial networks; no public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis, making this a moderate-priority hardening item rather than an emergency patch.