As cited
Copy frozen at (site build).
vulnerabilities
Siemens SIMATIC IoT2050 Advanced
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens SIMATIC IoT2050 Advanced
Siemens SIMATIC IoT2050 Advanced devices with Node-RED installed lack authentication on the Node-RED HTTP interface, allowing unauthenticated attackers to create malicious flows and execute arbitrary code with maximum privileges. The vulnerability (CVE-2026-58115) has a CVSS score of 10.0 and affects versions before V4.3.4.1. Siemens has released a patch and recommends immediate updates or disabling Node-RED.
Why it matters: Organizations running SIMATIC IoT2050 Advanced in critical infrastructure (chemical, energy, transportation, manufacturing) face immediate remote code execution risk from the internet and must update to V4.3.4.1 or disable Node-RED without delay.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens SIMATIC IoT2050 Advanced
Siemens SIMATIC IoT2050 Advanced devices with Node-RED installed lack authentication on the Node-RED HTTP interface, allowing unauthenticated attackers to create malicious flows and execute arbitrary code with maximum privileges. The vulnerability (CVE-2026-58115) has a CVSS score of 10.0 and affects versions before V4.3.4.1. Siemens has released a patch and recommends immediate updates or disabling Node-RED.
Why it matters: Organizations running SIMATIC IoT2050 Advanced in critical infrastructure (chemical, energy, transportation, manufacturing) face immediate remote code execution risk from the internet and must update to V4.3.4.1 or disable Node-RED without delay.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens SIMATIC IoT2050 Advanced
Siemens SIMATIC IoT2050 Advanced devices with Industrial OS and Node-RED installed contain a critical missing authentication vulnerability (CVE-2026-58115, CVSS 4.0 10.0) in the Node-RED HTTP interface. An unauthenticated remote attacker could exploit this to create malicious flows and run arbitrary code with maximum privileges on affected systems. Siemens released version 4.3.4.1 or later to address the issue and recommends immediate patching for all vulnerable deployments.
Why it matters: Organizations operating SIMATIC IoT2050 Advanced devices across chemical, manufacturing, energy, and transportation sectors worldwide must patch immediately to prevent unauthenticated remote code execution on critical infrastructure assets.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens SIMATIC IoT2050 Advanced
Siemens SIMATIC IoT2050 Advanced devices with Industrial OS and Node-RED installed lack authentication on the Node-RED HTTP interface, allowing unauthenticated remote attackers to execute arbitrary code with maximum privileges. The vulnerability (CVE-2026-58115) affects versions before 4.3.4.1 and impacts critical infrastructure sectors worldwide. Siemens has released a patched version and recommends updating immediately or uninstalling Node-RED.
Why it matters: Industrial control system (ICS) operators managing SIMATIC IoT2050 Advanced deployments in chemical, manufacturing, energy, and transportation sectors face direct remote code execution risk from the internet; apply V4.3.4.1 or later immediately to prevent compromise of critical infrastructure.
- Source published
- First seen by Cybersecurity Tracker