5

CVE-2021-40359

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 6), SIMATIC NET PC Software V17 (All versions < V17 SP1), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Simatic Batch Version 8.2 Update -
Siemens ≫ Simatic Batch Version 8.2 Update upd_9
Siemens ≫ Simatic Batch Version 9.0 Update -
Siemens ≫ Simatic Batch Version 9.0 Update sp1
Siemens ≫ Simatic Batch Version 9.0 Update sp1_update_1
Siemens ≫ Simatic Batch Version 9.0 Update sp1_update_2
Siemens ≫ Simatic Batch Version 9.0 Update sp1_update_3
Siemens ≫ Simatic Batch Version 9.0 Update sp1_update_4
Siemens ≫ Simatic Batch Version 9.1 Update -
Siemens ≫ Simatic Net Pc Version 14 Update -
Siemens ≫ Simatic Net Pc Version 15 Update -
Siemens ≫ Simatic Net Pc Version 16 Update -
Siemens ≫ Simatic Net Pc Version 16 Update update1
Siemens ≫ Simatic Net Pc Version 17 Update -
Siemens ≫ Simatic Route Control Version 8.2
Siemens ≫ Simatic Route Control Version 9.0 Update -
Siemens ≫ Simatic Route Control Version 9.1 Update -
Siemens ≫ Simatic Wincc Version <= 7.4
Siemens ≫ Simatic Wincc Version 7.5
Siemens ≫ Simatic Wincc Version 7.5 Update -
Siemens ≫ Simatic Wincc Version 7.5 Update sp1
Siemens ≫ Simatic Wincc Version 7.5 Update sp1_update1
Siemens ≫ Simatic Wincc Version 7.5 Update sp1_update2
Siemens ≫ Simatic Wincc Version 7.5 Update sp2
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update1
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update2
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update3
Siemens ≫ Simatic Wincc Version 7.5 Update sp2_update4
Siemens ≫ Simatic Wincc Version 15 Update -
Siemens ≫ Simatic Wincc Version 16 Update -
Siemens ≫ Simatic Wincc Version 16 Update update1
Siemens ≫ Simatic Wincc Version 16 Update update2
Siemens ≫ Simatic Wincc Version 16 Update update3
Siemens ≫ Simatic Wincc Version 16 Update update4
Siemens ≫ Simatic Wincc Version 17 Update -
Siemens ≫ Simatic Wincc Version 17 Update update1
Siemens ≫ Simaticpcs 7 Version <= 8.2
Siemens ≫ Simaticpcs 7 Version >= 9.0 < 9.1
Siemens ≫ Simaticpcs 7 Version 9.1 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.14% 0.624
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Siemens 7.7 3.1 4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://cert-portal.siemens.com/productcert/pdf/ssa-840188.pdf
Vendor Advisory