9.9

CVE-2021-40358

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). Legitimate file operations on the web server of the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read, write or delete unexpected critical files.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Simatic Pcs 7 Version8.2
Siemens ≫ Simatic Pcs 7 Version9.0 Update-
Siemens ≫ Simatic Pcs 7 Version9.1 Update-
Siemens ≫ Simatic Wincc Version7.4
Siemens ≫ Simatic Wincc Version7.4 Update-
Siemens ≫ Simatic Wincc Version7.4 Updatesp1
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update1
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update10
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update11
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update12
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update13
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update14
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update15
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update16
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update17
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update18
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update2
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update3
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update4
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update5
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update6
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update7
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update8
Siemens ≫ Simatic Wincc Version7.4 Updatesp1_update9
Siemens ≫ Simatic Wincc Version7.4 Updateupdate_1
Siemens ≫ Simatic Wincc Version7.5 Update-
Siemens ≫ Simatic Wincc Version7.5 Updatesp1
Siemens ≫ Simatic Wincc Version7.5 Updatesp1_update1
Siemens ≫ Simatic Wincc Version7.5 Updatesp1_update2
Siemens ≫ Simatic Wincc Version7.5 Updatesp2
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update1
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update2
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update3
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update4
Siemens ≫ Simatic Wincc Version15
Siemens ≫ Simatic Wincc Version15.1 Update-
Siemens ≫ Simatic Wincc Version15.1 Updateupdate_1
Siemens ≫ Simatic Wincc Version15.1 Updateupdate_2
Siemens ≫ Simatic Wincc Version15.1 Updateupdate_3
Siemens ≫ Simatic Wincc Version15.1 Updateupdate_4
Siemens ≫ Simatic Wincc Version15.1 Updateupdate_5
Siemens ≫ Simatic Wincc Version15.1 Updateupdate_6
Siemens ≫ Simatic Wincc Version16 Updateupdate1
Siemens ≫ Simatic Wincc Version16 Updateupdate2
Siemens ≫ Simatic Wincc Version16 Updateupdate3
Siemens ≫ Simatic Wincc Version16 Updateupdate4
Siemens ≫ Simatic Wincc Version17
Siemens ≫ Simatic Wincc Version17 Updateupdate1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.58% 0.662
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
productcert@siemens.com 9.9 3.1 6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.