vulnerability
Siemens SIMATIC IoT2050 Advanced
Critical
Summary
A vulnerability in Siemens SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed allows unauthenticated remote attackers to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released an update (V4.3.4.1) and strongly recommends updating to mitigate this risk. The vulnerability stems from a missing authentication mechanism within the Node-RED HTTP interface.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data