Skip to content
OpenAdvisories
High ICSA-25-254-06 1 CVE

Siemens Industrial Edge Management

Published Sep 9, 2025 · Updated Sep 9, 2025

Vendor: Siemens Product: Industrial Edge Management OS (IEM-OS)

Summary

Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition.

Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • High 7.5
    CVE-2025-48976 Public exploit EPSS 34%

    Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

    Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade…

    Apache Software Foundation Apache Commons FileUpload tomcat9 tomcat9 Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Publication Date

References