Siemens Capital Embedded AR Classic
Summary
Siemens Capital Embedded AR Classic contains an out-of-bounds read vulnerability (CVE-2026-89208) that can lead to abnormal product behavior or denial of service. Siemens has released a fix for R20-11 and recommends updating, while providing countermeasures for versions where a fix is not yet available.
IFF Assessment
The vulnerability allows an attacker to cause abnormal product behavior or denial of service, which is detrimental to system availability and security.
Severity
Defender Context
This vulnerability impacts critical infrastructure sectors, highlighting the need for defenders to monitor for and patch affected Siemens Capital Embedded AR Classic systems. Network segmentation and proper firewall configuration are recommended as mitigations for systems where immediate patching is not possible.