{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Siemens Industrial Edge Devices contain an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-001536.html"
      },
      {
        "category": "self",
        "summary": "SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-001536.json"
      }
    ],
    "title": "SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices",
    "tracking": {
      "current_release_date": "2026-05-12T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-001536",
      "initial_release_date": "2026-01-13T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-01-13T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2026-05-12T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added fix for SIMATIC Automation Workstation family"
        }
      ],
      "status": "interim",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.24.2",
                "product": {
                  "name": "Industrial Edge Cloud Device (IECD)",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "Industrial Edge Cloud Device (IECD)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.24.2",
                "product": {
                  "name": "Industrial Edge Own Device (IEOD)",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "Industrial Edge Own Device (IEOD)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.24.2",
                "product": {
                  "name": "Industrial Edge Virtual Device (IEVD)",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "Industrial Edge Virtual Device (IEVD)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c2.2",
                "product": {
                  "name": "SCALANCE LPE9413 (6GK5998-3GS01-2AC2)",
                  "product_id": "4",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK5998-3GS01-2AC2"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE LPE9413 (6GK5998-3GS01-2AC2)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c2.2",
                "product": {
                  "name": "SCALANCE LPE9433 (6GK5998-3GS11-2AC2)",
                  "product_id": "5",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK5998-3GS11-2AC2"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SCALANCE LPE9433 (6GK5998-3GS11-2AC2)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.3",
                "product": {
                  "name": "SIMATIC Automation Workstation 19\" (6AV7256-6CA01-0FP0)",
                  "product_id": "6",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV7256-6CA01-0FP0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Automation Workstation 19\" (6AV7256-6CA01-0FP0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.3",
                "product": {
                  "name": "SIMATIC Automation Workstation 24\" (6AV7256-6CA00-0FP0)",
                  "product_id": "7",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV7256-6CA00-0FP0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Automation Workstation 24\" (6AV7256-6CA00-0FP0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)",
                  "product_id": "8",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3KB06-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)",
                  "product_id": "9",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3KB40-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)",
                  "product_id": "10",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3KB70-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)",
                  "product_id": "11",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3KB36-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)",
                  "product_id": "12",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB27-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)",
                  "product_id": "13",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB27-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)",
                  "product_id": "14",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB27-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)",
                  "product_id": "15",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB57-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0)",
                  "product_id": "16",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB57-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)",
                  "product_id": "17",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB57-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)",
                  "product_id": "18",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB06-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)",
                  "product_id": "19",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB40-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)",
                  "product_id": "20",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB70-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)",
                  "product_id": "21",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3MB36-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)",
                  "product_id": "22",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB27-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)",
                  "product_id": "23",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB27-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)",
                  "product_id": "24",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB27-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)",
                  "product_id": "25",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB57-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0)",
                  "product_id": "26",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB57-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)",
                  "product_id": "27",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB57-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)",
                  "product_id": "28",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB06-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)",
                  "product_id": "29",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB40-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)",
                  "product_id": "30",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB70-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)",
                  "product_id": "31",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3QB36-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)",
                  "product_id": "32",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB27-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)",
                  "product_id": "33",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB27-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)",
                  "product_id": "34",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB27-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)",
                  "product_id": "35",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB57-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0)",
                  "product_id": "36",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB57-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)",
                  "product_id": "37",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB57-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)",
                  "product_id": "38",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB06-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)",
                  "product_id": "39",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB40-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)",
                  "product_id": "40",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB70-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)",
                  "product_id": "41",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3UB36-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)",
                  "product_id": "42",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB27-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)",
                  "product_id": "43",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB27-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)",
                  "product_id": "44",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB27-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)",
                  "product_id": "45",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB57-1BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3XB57-0BX0)",
                  "product_id": "46",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB57-0BX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3XB57-0BX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)",
                  "product_id": "47",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB57-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)",
                  "product_id": "48",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB40-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)",
                  "product_id": "49",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB70-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)",
                  "product_id": "50",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB06-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)",
                  "product_id": "51",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3XB36-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP700\u00a0Unified Comfort Panel (6AV2128-3GB06-0AX1)",
                  "product_id": "52",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3GB06-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP700\u00a0Unified Comfort Panel (6AV2128-3GB06-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)",
                  "product_id": "53",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3GB40-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)",
                  "product_id": "54",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3GB70-0AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)",
                  "product_id": "55",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AV2128-3GB36-0AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.25.1",
                "product": {
                  "name": "SIMATIC IOT2050 (6ES7647-0BA00-1YA2)",
                  "product_id": "56",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6ES7647-0BA00-1YA2"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IOT2050 (6ES7647-0BA00-1YA2)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC BX-39A Industrial Edge Device",
                  "product_id": "57"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-39A Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC BX-59A Industrial Edge Device",
                  "product_id": "58"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC BX-59A Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC127E Industrial Edge Device",
                  "product_id": "59"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC127E Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC227E Industrial Edge Device",
                  "product_id": "60"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227E Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC227G Industrial Edge Device",
                  "product_id": "61"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227G Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC427E Industrial Edge Device",
                  "product_id": "62"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC427E Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c3.1",
                "product": {
                  "name": "SIMATIC IPC847E Industrial Edge Device",
                  "product_id": "63"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC847E Industrial Edge Device"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)",
                  "product_id": "64",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1128-3KB06-4AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)",
                  "product_id": "65",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1128-3MB06-4AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21",
                "product": {
                  "name": "SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)",
                  "product_id": "66",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1128-3GB06-4AX1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-40805",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "23",
          "24",
          "25",
          "26",
          "27",
          "28",
          "29",
          "30",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "37",
          "38",
          "39",
          "40",
          "41",
          "42",
          "43",
          "44",
          "45",
          "46",
          "47",
          "48",
          "49",
          "50",
          "51",
          "52",
          "53",
          "54",
          "55",
          "56",
          "57",
          "58",
          "59",
          "60",
          "61",
          "62",
          "63",
          "64",
          "65",
          "66"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Ensure network access to affected products is limited to trusted parties only",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "37",
            "38",
            "39",
            "40",
            "41",
            "42",
            "43",
            "44",
            "45",
            "46",
            "47",
            "48",
            "49",
            "50",
            "51",
            "52",
            "53",
            "54",
            "55",
            "56",
            "57",
            "58",
            "59",
            "60",
            "61",
            "62",
            "63",
            "64",
            "65",
            "66"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.24.2 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.24.2/industrial-edge-own-device/release-notes"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.24.2 or later version",
          "product_ids": [
            "1",
            "3"
          ],
          "url": "https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.24.2/industrial-edge-virtual/cloud-device/release-notes"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.25.1 or later version",
          "product_ids": [
            "56"
          ],
          "url": "https://docs.industrial-operations-x.siemens.cloud/r/en-us/v1.25/one-db-simatic-iot2050-industrial-edge-device/all-release-notes/release-notes-v1.25"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.3 or later version",
          "product_ids": [
            "6",
            "7"
          ],
          "url": "https://iehub.eu1.edge.siemens.cloud/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://docs.eu1.edge.siemens.cloud/release_notes/device_release_notes/LPE9413.html"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.2 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://docs.eu1.edge.siemens.cloud/release_notes/device_release_notes/SCALANCELPE9433Integrated.html"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21 or later version",
          "product_ids": [
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "37",
            "38",
            "39",
            "40",
            "41",
            "42",
            "43",
            "44",
            "45",
            "46",
            "47",
            "48",
            "49",
            "50",
            "51",
            "52",
            "53",
            "54",
            "55",
            "64",
            "65",
            "66"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109825605/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.1 or later version",
          "product_ids": [
            "57",
            "58",
            "59",
            "60",
            "61",
            "62",
            "63"
          ],
          "url": "https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.1/simatic-ipc-ied-os/release-notes"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "23",
            "24",
            "25",
            "26",
            "27",
            "28",
            "29",
            "30",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "37",
            "38",
            "39",
            "40",
            "41",
            "42",
            "43",
            "44",
            "45",
            "46",
            "47",
            "48",
            "49",
            "50",
            "51",
            "52",
            "53",
            "54",
            "55",
            "56",
            "57",
            "58",
            "59",
            "60",
            "61",
            "62",
            "63",
            "64",
            "65",
            "66"
          ]
        }
      ],
      "title": "CVE-2025-40805"
    }
  ]
}