Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_hmi_mtp1200_comfort_pro_neutral_design_for_support_arm_(not_extendable,_flange_on_top):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Hmi Mtp1200 Comfort Pro Neutral Design For Support Arm (Not Extendable, Flange On Top) (71ab5cb0-5eb6-5478-b767-1ae71d06721b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27662 vulnerable 2026-06-08 07:53:22.823816 Details available
HIGH (7.7)
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.
Published: 2026-05-12T08:21:13.221Z
Updated: 2026-05-13T01:48:49.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40805 vulnerable 2026-06-08 07:25:05.697631 Details available
CRITICAL (10)
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Published: 2026-01-13T09:44:03.338Z
Updated: 2026-05-12T08:20:44.842Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.