7.7

CVE-2021-40359

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 6), SIMATIC NET PC Software V17 (All versions < V17 SP1), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Simatic Batch Version8.2 Update-
Siemens ≫ Simatic Batch Version8.2 Updateupd_9
Siemens ≫ Simatic Batch Version9.0 Update-
Siemens ≫ Simatic Batch Version9.0 Updatesp1
Siemens ≫ Simatic Batch Version9.0 Updatesp1_update_1
Siemens ≫ Simatic Batch Version9.0 Updatesp1_update_2
Siemens ≫ Simatic Batch Version9.0 Updatesp1_update_3
Siemens ≫ Simatic Batch Version9.0 Updatesp1_update_4
Siemens ≫ Simatic Batch Version9.1 Update-
Siemens ≫ Simatic Net Pc Version14 Update-
Siemens ≫ Simatic Net Pc Version15 Update-
Siemens ≫ Simatic Net Pc Version16 Update-
Siemens ≫ Simatic Net Pc Version16 Updateupdate1
Siemens ≫ Simatic Net Pc Version17 Update-
Siemens ≫ Simatic Route Control Version9.0 Update-
Siemens ≫ Simatic Route Control Version9.1 Update-
Siemens ≫ Simatic Wincc Version <= 7.4
Siemens ≫ Simatic Wincc Version7.5
Siemens ≫ Simatic Wincc Version7.5 Update-
Siemens ≫ Simatic Wincc Version7.5 Updatesp1
Siemens ≫ Simatic Wincc Version7.5 Updatesp1_update1
Siemens ≫ Simatic Wincc Version7.5 Updatesp1_update2
Siemens ≫ Simatic Wincc Version7.5 Updatesp2
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update1
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update2
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update3
Siemens ≫ Simatic Wincc Version7.5 Updatesp2_update4
Siemens ≫ Simatic Wincc Version15 Update-
Siemens ≫ Simatic Wincc Version16 Update-
Siemens ≫ Simatic Wincc Version16 Updateupdate1
Siemens ≫ Simatic Wincc Version16 Updateupdate2
Siemens ≫ Simatic Wincc Version16 Updateupdate3
Siemens ≫ Simatic Wincc Version16 Updateupdate4
Siemens ≫ Simatic Wincc Version17 Update-
Siemens ≫ Simatic Wincc Version17 Updateupdate1
Siemens ≫ Simaticpcs 7 Version <= 8.2
Siemens ≫ Simaticpcs 7 Version >= 9.0 < 9.1
Siemens ≫ Simaticpcs 7 Version9.1 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.47% 0.635
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
productcert@siemens.com 7.7 3.1 4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.