CVE-2026-14837
Received Received - Intake

Improper Signature Verification in Lenze Products Allows SSH Bypass

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: CERT VDE

Description
Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-27
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-14837
EUVD
EUVD-2026-49115

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
lenze c430 to 1.15.2 (exc)
lenze c520 to 1.15.2 (exc)
lenze c550 to 1.15.2 (exc)
lenze i950_gena to 1.14.2 (exc)
lenze i950_genb to 2.0.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper signature verification flaw in the SSH enablement mechanism of multiple Lenze products. A low-privileged local attacker can bypass signature checks on the SSH enable file, allowing unauthorized SSH access to the device. Successful exploitation may lead to unauthorized administrative access and full system compromise.

Detection Guidance

Check for unauthorized SSH enable files on Lenze devices by inspecting the SD Card for files like 'ssh_enable' or similar. Verify firmware versions against the affected ranges (c4x0 <1.15.2, c5x0 <1.15.2, i950 <1.14.2 or <2.0.2). Use network scans to detect unexpected SSH access on Lenze devices.

Impact Analysis

This vulnerability allows attackers to gain unauthorized administrative access to affected Lenze devices, potentially leading to complete system compromise. Attackers could manipulate device settings, steal sensitive data, or disrupt operations. The impact includes loss of confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements for GDPR and HIPAA. Organizations may face legal penalties, reputational damage, and loss of trust due to compromised data integrity and confidentiality.

Mitigation Strategies

Delete any unauthorized SSH enable files from the SD Card. Physically secure access to the SD Card to prevent tampering. Update firmware to the latest versions (c4x0 1.15.2, c5x0 1.15.2, i950 GenA 1.15.0, i950 GenB 2.0.3). Restrict file transfers to authorized methods like PLC Designer or OPC UA.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-14837. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart