7.5

CVE-2021-40358

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). Legitimate file operations on the web server of the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read, write or delete unexpected critical files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Simatic Pcs 7 Version 8.2
Siemens ≫ Simatic Pcs 7 Version 9.0 Update -
Siemens ≫ Simatic Pcs 7 Version 9.1 Update -
Siemens ≫ Simatic Wincc Version 7.4
Siemens ≫ Simatic Wincc Version 7.4 Update -
Siemens ≫ Simatic Wincc Version 7.4 Update sp1
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update1
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update10
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update11
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update12
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update13
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update14
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update15
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update16
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update17
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update18
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update2
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update3
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update4
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update5
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update6
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update7
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update8
Siemens ≫ Simatic Wincc Version 7.4 Update sp1_update9
Siemens ≫ Simatic Wincc Version 7.4 Update update_1
Siemens ≫ Simatic Wincc Version 7.5 Update -
Siemens ≫ Simatic Wincc Version 7.5 Update sp1
Siemens ≫ Simatic Wincc Version 7.5 Update sp1_update1
Siemens ≫ Simatic Wincc Version 7.5 Update sp1_update2
Siemens ≫ Simatic Wincc Version 7.5 Update sp2
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update1
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update2
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update3
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update4
Siemens ≫ Simatic Wincc Version 15
Siemens ≫ Simatic Wincc Version 15.1 Update -
Siemens ≫ Simatic Wincc Version 15.1 Update update_1
Siemens ≫ Simatic Wincc Version 15.1 Update update_2
Siemens ≫ Simatic Wincc Version 15.1 Update update_3
Siemens ≫ Simatic Wincc Version 15.1 Update update_4
Siemens ≫ Simatic Wincc Version 15.1 Update update_5
Siemens ≫ Simatic Wincc Version 15.1 Update update_6
Siemens ≫ Simatic Wincc Version 16 Update update1
Siemens ≫ Simatic Wincc Version 16 Update update2
Siemens ≫ Simatic Wincc Version 16 Update update3
Siemens ≫ Simatic Wincc Version 16 Update update4
Siemens ≫ Simatic Wincc Version 17
Siemens ≫ Simatic Wincc Version 17 Update update1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.23% 0.651
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Siemens 9.9 3.1 6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://cert-portal.siemens.com/productcert/pdf/ssa-840188.pdf
Vendor Advisory