Siemens Simatic HMI Mtp2200 Unified Comfort Hygienic Neutral Design vulnerabilities

3 vulnerabilities

Known vulnerabilities in Siemens Simatic HMI Mtp2200 Unified Comfort Hygienic Neutral Design, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.1CriticalCVE-2026-44415siemens · industrial edge device kit - arm64 v1.10 +97 moresiemens industrial edge device kit - arm64 v1.10Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data.EPSS0.46%10CriticalCVE-2025-40805siemens · industrial edge cloud device (iecd) +106 moresiemens industrial edge cloud device (iecd)Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.EPSS0.65%7.7HighCVE-2026-27662siemens · simatic hmi mtp1000 unified comfort panel +49 moresiemens simatic hmi mtp1000 unified comfort panelAffected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.EPSS0.17%