Intel

CVE-2026-89207

Siemens ProductCERT Advisory SSA-823812

mediumEPSS 0.4%

Description

A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).

Source: siemens_advisoryNVD (NIST)cvelistv5

Metrics

XIEM Effective CVSS
6.9
Source: cna-v4
EPSS percentile
35.7 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
medium
Priority score
74.67
Exploit maturity
no public PoC known
CVSS v3
6.5
CVSS v4
6.9
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-09-16 08:16 UTC
CWE
CWE-1287

Weakness classes (CWE)

  • CWE-1287Base

    Improper Validation of Specified Type of Input

    The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

    cwe.mitre.org →

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. CVE Modified2026-09-16 19:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
    • SSVC: {"id":"CVE-2026-89207","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"yes"},{"technical…
  2. New CVE Received2026-09-16 08:16 UTC· productcert@siemens.com
    • Description: A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).
    • CVSS V4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • CVSS V3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
    • CWE: CWE-1287