As cited
Copy frozen at (site build).
vulnerabilities
Siemens Capital Embedded AR Classic
Siemens Capital Embedded AR Classic contains an out-of-bounds read vulnerability (CVE-2026-89208) that could allow unauthenticated remote attackers to trigger abnormal product behavior, instability, or denial of service. Version R20-11 has been patched to V2303 or later, but version 431-422 has no fix planned. Siemens recommends network segmentation, firewall configuration, and applying patches where available.
Why it matters: Organizations operating Capital Embedded AR Classic in critical manufacturing, transportation, energy, healthcare, financial services, or government environments must prioritize patching R20-11 to V2303 or later and implement network segmentation for unpatched 431-422 systems to prevent remote denial of service attacks.
- Source published
- First seen by Cybersecurity Tracker