Description
A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Industrial Edge Management OS (IEM-OS) | — | — |
Advisories 3
- NCSC-2025-0008 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jan 14, 2025
- ICSA-25-016-02 Siemens Industrial Edge Management CISA ICS & IT advisories · Jan 14, 2025
- SSA-416411 SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management Siemens ProductCERT · Jan 14, 2025