Siemens Capital Embedded AR Classic

🗓️ 13 Oct 2026 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 1 Views

Out-of-bounds read in Siemens Capital Embedded AR Classic causing DoS or instability.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-89208	13 Oct 202609:56	–	circl
CNNVD	Siemens Capital Embedded AR Classic buffer error vulnerability	12 Oct 202616:00	–	cnnvd
CVE	CVE-2026-89208	13 Oct 202609:19	–	cve
Cvelist	CVE-2026-89208	13 Oct 202609:19	–	cvelist
EUVD	EUVD-2026-98405	13 Oct 202609:19	–	euvd
NCSC	Vulnerabilities present in Siemens products	13 Oct 202609:43	–	ncsc
NVD	CVE-2026-89208	13 Oct 202610:17	–	nvd
Positive Technologies	PT-2026-111404	13 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-89208: Out-of-bounds Read	13 Oct 202600:00	–	rapid7
Tenable Nessus	Siemens Desigo PXC/PXM Controllers Out-of-bounds Read (CVE-2026-89208)	20 Oct 202600:00	–	nessus

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-055299.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-055299.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-295-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-295-04
cisa	www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b

13 Oct 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

CVSS 46.9

EPSS0.00424

SSVC

Siemens Capital Embedded AR Classic out-of-bounds read denial of service instability