CVE-2026-33892
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-33892
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 < V1.15.17), Industrial Edge Management Pro V2 (All versions >= V2.0.0 < V2.1.1), Industrial Edge Management Virtual (All versions >= V2.2.0 < V2.8.0). Affected management systems do not properly enforce user authentication on remote connections to devices. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has identified the header and port used for remote connections to devices and that the remote connection feature is enabled for the device. Exploitation allows the attacker to tunnel to the device. Security features on this device itself (e.g. app specific authentication) are not affected.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用基本弱点进行的认证绕过
Source: NVD (National Vulnerability Database)
Vulnerability Title
Siemens Industrial Edge Management 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Siemens Industrial Edge Management是德国西门子（Siemens）公司的一个平台，用于在靠近车间的计算平台上托管来自不同供应商的应用程序。 Siemens Industrial Edge Management存在安全漏洞，该漏洞源于远程连接设备时用户身份验证执行不当，可能导致未经身份验证的远程攻击者绕过身份验证并冒充合法用户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Siemens | Industrial Edge Management Pro V1 | V1.7.6 ~ V1.15.17 | - | |
| Siemens | Industrial Edge Management Pro V2 | V2.0.0 ~ V2.1.1 | - | |
| Siemens | Industrial Edge Management Virtual | V2.2.0 ~ V2.8.0 | - |
II. Public POCs for CVE-2026-33892
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-33892
请登录查看更多情报信息。
Same Patch Batch · Siemens · 2026-04-14 · 5 CVEs total
| CVE-2026-27668 | 8.8 HIGH | Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary 安全漏洞 |
| CVE-2026-25654 | 8.8 HIGH | Siemens SINEC NMS 安全漏洞 |
| CVE-2026-24032 | 7.3 HIGH | Siemens SINEC NMS 数据伪造问题漏洞 |
| CVE-2025-40745 | 3.7 LOW | Siemens多款产品 信任管理问题漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-305
- CVE-2026-6266
Aap-controller: aap-gateway: account hijacking and unauthori - CVE-2026-4670
Improper Authentication vulnerability in Progress MOVEit Aut - CVE-2026-33472
Cryptomator Hub OAuth token exchange HTTP downgrade via getA - CVE-2026-20152
Cisco Secure Web Appliance Authentication Service Traffic By - CVE-2026-40039
Pachno 1.0.6 Open Redirection via return_to Parameter
V. Comments for CVE-2026-33892
No comments yet