CVE-2026-27662 | THREATINT

Description

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.

PUBLISHED Reserved 2026-02-23 | Published 2026-05-12 | Updated 2026-05-13 | Assigner siemens

HIGH: 7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

HIGH: 7.0CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-1188: Initialization of a Resource with an Insecure Default

Product status

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

Default status

unknown

Any version before V21

affected

References

cert-portal.siemens.com/productcert/html/ssa-387223.html

cve.org (CVE-2026-27662)

nvd.nist.gov (CVE-2026-27662)

Download JSON