Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-94293

Missing authentication for critical function in the aas-edge-client REST API

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

Affected versions

  • Murrelektronik Software AAS Edge Client all versions

    0.0.0

References 1

certvde.com