7.7 HighCWE-1188
CVE-2026-27662
Siemens SIMATIC HMI MTP1000 Unified Comfort Panel vulnerability
SiemensSIMATIC HMI MTP1000 Unified Comfort Panel
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.2%probability of exploitation in the next 30 days
Higher than 6% of scored CVEs
SeverityCVSS
7.7High
Description NVD
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.
Coverage 1 article · 1 outlet
- CISA alerts to Siemens HMI vulnerability permitting browser accessCISA · first in our coverage · official notice