Critical SSA-634640 1 CVE

SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Published Apr 8, 2025 · Updated Jul 8, 2025 · Revision 2

Vendor: Siemens Product: Industrial Edge Own Device (IEOD) Product: Industrial Edge Virtual Device Product: SCALANCE LPE9413 (6GK5998-3GS01-2AC2) Product: SIMATIC IPC BX-39A Industrial Edge Device Product: SIMATIC IPC BX-59A Industrial Edge Device Product: SIMATIC IPC127E Industrial Edge Device Product: SIMATIC IPC227E Industrial Edge Device Product: SIMATIC IPC427E Industrial Edge Device Product: SIMATIC IPC847E Industrial Edge Device

Summary

Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Critical 9.8

CVE-2024-54092

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device …

Siemens Industrial Edge Device Kit - arm64 V1.21 Industrial Edge Device Kit - x86-64 V1.18 Industrial Edge Device Kit - x86-64 V1.20 Browsers ICS / OT

Apr 8, 2025

Revision history

2025-07-08 #2
Added fix for SCALANCE LPE9413 (6GK5998-3GS01-2AC2)
2025-04-08 #1
Publication Date

References

SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-634640.html