HIGH CWE-22
CVE-2026-85114
Siemens .NET Client Library for SIMATIC S7 Webserver API vulnerability
Siemens·.NET Client Library for SIMATIC S7 Webserver API
7.5/ 10
CVSS 3.1
High severity
0.33%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 27% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Oct 13, 2026
- Updated
- Oct 16, 2026
- First covered
- Oct 26, 2026
- Latest story
- 3 weeks ago
Summary
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads.This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityNone
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NAffected products
- Siemens .NET Client Library for SIMATIC S7 Webserver APIbefore V3.3.61