‹ Volver al listado

CVE-2026-89208

Estado: Pendiente de análisisMedia (6.9)—
Gravedad6.9Media · CVSS 4.0
Probabilidad de explotación0.42 %mayor que el 35 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado

Se ha identificado una vulnerabilidad en Capital Embedded AR Classic 431-422 (todas las versiones), Capital Embedded AR Classic R20-11 (todas las versiones < V2303), Desigo PXC00-E.D (todas las versiones >= V2.3), Desigo PXC00-U (todas las versiones >= V2.3), Desigo PXC001-E.D (todas las versiones >= V2.3), Desigo PXC100-E.D (todas las versiones >= V2.3), Desigo PXC12-E.D (todas las versiones >= V2.3), Desigo PXC128-U (todas las versiones >= V2.3), Desigo PXC200-E.D (todas las versiones >= V2.3), Desigo PXC22-E.D (todas las versiones >= V2.3), Desigo PXC22.1-E.D (todas las versiones >= V2.3), Desigo PXC36.1-E.D (todas las versiones >= V2.3), Desigo PXC50-E.D (todas las versiones >= V2.3), Desigo PXC64-U (todas las versiones >= V2.3), Desigo PXM20-E (todas las versiones >= V2.3).

Leer descripción completaMostrar menos

El producto afectado no valida adecuadamente los límites de entrada antes de acceder a los datos del paquete. Esto podría permitir que un atacante remoto no autenticado desencadene lecturas de memoria fuera de los límites de paquete previstos.

Traducción automática del texto original de NVD (en inglés).

CVSS

Puntuación base
6.9
Versión
4.0
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días
0.42 %
Percentil entre todas las CVEs puntuadas
35
Fecha de la puntuación
20/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector CVSS AV:N/PR:N/UI:N (red sin autenticación) + CWE-125 (out-of-bounds read) permiten lectura no autorizada de memoria remota en sistemas embebidos Desigo/AR Classic.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningPrivileged Account ManagementNetwork SegmentationLimit Access to Resource Over NetworkFilter Network TrafficApplication Isolation and Sandboxing

Tecnologías afectadas (14)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Siemens — Capital Embedded AR ClassicAISiemens — Desigo Pxc001 E DAISiemens — Desigo Pxc00 E DAISiemens — Desigo Pxc00 UAISiemens — Desigo Pxc100 E DAISiemens — Desigo Pxc128 UAISiemens — Desigo Pxc12 E DAISiemens — Desigo Pxc200 E DAISiemens — Desigo Pxc22 1 E DAISiemens — Desigo Pxc22 E DAISiemens — Desigo Pxc36 1 E DAISiemens — Desigo Pxc50 E DAISiemens — Desigo Pxc64 UAISiemens — Desigo Pxm20 EAI

CWE

Referencias

Mostrar las 2 referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89208",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-89208",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-10-13T15:48:47.827643Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "productcert@siemens.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "productcert@siemens.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 6.9,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "Capital Embedded AR Classic 431-422",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Capital Embedded AR Classic R20-11",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2303",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC00-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC00-U",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC001-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC100-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC12-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC128-U",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC200-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC22-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC22.1-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC36.1-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC50-E.D",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC64-U",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXM20-E",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2026-10-13T10:17:22.667",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-055299.html",
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-333035.html",
      "source": "productcert@siemens.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versions >= V2.3), Desigo PXC12-E.D (All versions >= V2.3), Desigo PXC128-U (All versions >= V2.3), Desigo PXC200-E.D (All versions >= V2.3), Desigo PXC22-E.D (All versions >= V2.3), Desigo PXC22.1-E.D (All versions >= V2.3), Desigo PXC36.1-E.D (All versions >= V2.3), Desigo PXC50-E.D (All versions >= V2.3), Desigo PXC64-U (All versions >= V2.3), Desigo PXM20-E (All versions >= V2.3). The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries."
    }
  ],
  "lastModified": "2026-10-15T20:38:04.303",
  "sourceIdentifier": "productcert@siemens.com"
}