Description
A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services.
This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | WTV676-HB6035 Web Interface | < V3.94 | V3.94 |
| Siemens | WTV776-HB6035 Web Interface | < V4.17 | V4.17 |
Advisories 2
- ICSA-26-265-08 Siemens WTV676 and WTV776 CISA ICS & IT advisories · Sep 22, 2026
- SSA-823812 SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices Siemens ProductCERT · Sep 16, 2026