Critical SSA-001536 1 CVE

SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices

Published Jan 13, 2026 · Updated May 12, 2026 · Revision 2

Vendor: Siemens Product: Industrial Edge Cloud Device (IECD) Product: Industrial Edge Own Device (IEOD) Product: Industrial Edge Virtual Device (IEVD) Product: SCALANCE LPE9413 (6GK5998-3GS01-2AC2) Product: SCALANCE LPE9433 (6GK5998-3GS11-2AC2) Product: SIMATIC Automation Workstation 19" (6AV7256-6CA01-0FP0) Product: SIMATIC Automation Workstation 24" (6AV7256-6CA00-0FP0) Product: SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) Product: SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) Product: SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) Product: SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) Product: SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) Product: SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit Product: SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) Product: SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) Product: SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio Product: SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) Product: SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) Product: SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) Product: SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) Product: SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) Product: SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) Product: SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit Product: SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) Product: SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) Product: SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio Product: SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) Product: SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) Product: SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) +36 more

Summary

Siemens Industrial Edge Devices contain an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Critical 10.0

CVE-2025-40805

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauth…

Siemens Industrial Edge Device Kit - arm64 V1.21 Industrial Edge Device Kit - x86-64 V1.18 Industrial Edge Device Kit - x86-64 V1.20 Browsers ICS / OT

Jan 13, 2026

Revision history

2026-05-12 #2
Added fix for SIMATIC Automation Workstation family
2026-01-13 #1
Publication Date

References

SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-001536.html