Siemens Industrial Edge Device Kit

An attacker could bypass authentication and impersonate a legitimate user on the Industrial Edge Device, potentially gaining unauthorized control over edge computing functions that process data from plant sensors and control devices. This could allow manipulation of production logic or disruption of edge-based automation.

Manufacturers using Siemens Industrial Edge Device Kit (all versions from V1.5 through V1.25) as edge computing devices that connect plant sensors, gateways, and control logic to cloud or data analytics systems. This affects any deployment using Industrial Edge Devices for real-time data processing, local control, or as a bridge between on-premises equipment and industrial IoT platforms.

An unauthenticated attacker with network access to the Industrial Edge Device can send a specially crafted request to exploit the authorization bypass vulnerability, allowing them to bypass the authentication mechanism and gain access to the device as a legitimate user without providing valid credentials.