CVE-2026-58115

Name of the Vulnerable Software and Affected Versions SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) versions prior to V4.3.4.1

Description Devices running Industrial OS with Node-RED installed do not enforce authentication on the Node-RED HTTP interface. This allows unauthenticated access to programming nodes capable of executing system commands on the server. A remote attacker could exploit this by creating malicious flows through the HTTP interface to execute arbitrary code on the underlying server with maximum privileges.

Recommendations Update SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) to version V4.3.4.1 or later.