Description
A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts from a configuration file and execute them unchecked. This could allow an attacker which is able to manipulate the configuration file to make the user execute arbitrary code on the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | meta-iot2050 | V01.03.01 | — |
Advisories 2
- NCSC-2026-0479 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 11, 2026
- SSA-724261 SSA-724261: Command Injection Vulnerability in meta-iot2050 Siemens ProductCERT · Nov 10, 2026