The vulnerability stems from improper access control on internal APIs and paths. Authenticated users can reach endpoints that should be restricted, enabling them to retrieve sensitive information. In the most severe scenario, the attacker could leverage this access to facilitate further unauthorized entry or delete data, thereby compromising confidentiality, integrity, and availability of the controlled environment.

Affected systems include Siemens Industrial Edge Device Kit for ARM64 (versions V1.5 through V1.28) and x86‑64 (versions V1.5 through V1.28). In addition, a broad range of Siemens SIMATIC HMI MTP series panels—MTP1000, MTP1200, MTP1500, MTP1900, MTP2200, and MTP700—in both standard and hygienic variants, as well as the SIPLUS HMI MTP1000, MTP1200, and MTP700 Unified Comfort models—are impacted.

The CVSS score of 8.9 categorizes this as a high‑severity flaw. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be remote, accessed by users who already hold valid credentials; no additional exploitation prerequisites beyond authentication are mentioned. Once authenticated, the attacker can read internal API data, potentially manipulate privilege or delete data, indicating a significant risk to operational integrity.