{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)", "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Siemens is currently assessing the impact of Node2Shell (CVE-2026-111497) on Industrial Edge. Please check your Industrial Edge Management (IEM) setup:\n\n- No Management Applications installed: No action is required. Although the affected Brotli library is included in the IEM software stack, the affected functionality is not used or exposed. The same applies to IEDK.\n- Management Applications installed: Follow the specific mitigations until a fix is available.\n\nFor Siemens-managed services, Industrial Edge Hub and Industrial Edge Management Cloud, appropriate Firewall/WAF protection has already been implemented.\n\nSiemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "productcert@siemens.com", "name": "Siemens ProductCERT", "namespace": "https://www.siemens.com" }, "references": [ { "category": "self", "summary": "SSA-443410: Node2Shell Vulnerability in Industrial Edge Management Applications - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-443410.html" }, { "category": "self", "summary": "SSA-443410: Node2Shell Vulnerability in Industrial Edge Management Applications - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-443410.json" } ], "title": "SSA-443410: Node2Shell Vulnerability in Industrial Edge Management Applications", "tracking": { "current_release_date": "2026-10-30T00:00:00.000Z", "generator": { "engine": { "name": "Siemens ProductCERT CSAF Generator", "version": "1" } }, "id": "SSA-443410", "initial_release_date": "2026-10-30T00:00:00.000Z", "revision_history": [ { "date": "2026-10-30T00:00:00.000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" } ], "status": "interim", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Cloud Connector Configurator", "product_id": "1" } } ], "category": "product_name", "name": "Cloud Connector Configurator" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Common Configurator\u00a0(CC on IEM)", "product_id": "2" } } ], "category": "product_name", "name": "Common Configurator\u00a0(CC on IEM)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Common Configurator on Device\u00a0(CC on Edge)", "product_id": "3" } } ], "category": "product_name", "name": "Common Configurator on Device\u00a0(CC on Edge)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Data Flow Monitoring", "product_id": "4" } } ], "category": "product_name", "name": "Data Flow Monitoring" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Databus Configurator", "product_id": "5" } } ], "category": "product_name", "name": "Databus Configurator" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Edge OPC UA Server Configurator", "product_id": "6" } } ], "category": "product_name", "name": "Edge OPC UA Server Configurator" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Flow Creator Configurator", "product_id": "7" } } ], "category": "product_name", "name": "Flow Creator Configurator" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Industrial Edge Hub", "product_id": "8" } } ], "category": "product_name", "name": "Industrial Edge Hub" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "Industrial Edge Management Cloud", "product_id": "9" } } ], "category": "product_name", "name": "Industrial Edge Management Cloud" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-111497", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\r\n\r\n\r\n\r\n\r\n\r\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.", "title": "CVE Description" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9" ] }, "remediations": [ { "category": "mitigation", "details": "Stop Common Configurator on Device (CC on Edge) until a fix is available", "product_ids": [ "3" ] }, { "category": "mitigation", "details": "Stop Data Flow Monitoring until a fix is available", "product_ids": [ "4" ] }, { "category": "mitigation", "details": "Uninstall all Management Applications and protect your IEM instance with a Firewall/WAF until a fix is available", "product_ids": [ "1", "2", "5", "6", "7" ] }, { "category": "none_available", "details": "Currently no fix is available", "product_ids": [ "1", "2", "3", "4", "5", "6", "7" ] }, { "category": "vendor_fix", "details": "Vulnerability fixed on central cloud service starting 2026-10-29; no user actions necessary", "product_ids": [ "8" ] }, { "category": "vendor_fix", "details": "Vulnerability fixed on central cloud service starting 2026-10-28; no user actions necessary", "product_ids": [ "9" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9" ] } ], "title": "CVE-2026-111497" } ] }