SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT
SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-67367DE | high8.6 | — | ||
A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions <… | ||||
references
External citations — patches, advisories, analysis.
remediations (16)
- MitigationSIMOVE Fleetmanager V3.1
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIMOVE Fleetmanager V3.2
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIMOVE Fleetmanager V3.3
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIMOVE Fleetmanager V4.0
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V1.7
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V2.2
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V3.0
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V3.1
Configure appropriate user management by restricting services' access rights to project files
- FixedSIMOVE Fleetmanager V3.1
Update to V3.1.13 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813191/ - FixedSIMOVE Fleetmanager V3.2
Update to V3.2.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813191/ - FixedSIMOVE Fleetmanager V3.3
Update to V3.3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813191/ - FixedSIMOVE Fleetmanager V4.0
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004946/ - FixedSIPLANT V1.7
Contact customer support siplant-support.de@siemens.com
- FixedSIPLANT V2.2
Contact customer support siplant-support.de@siemens.com
- FixedSIPLANT V3.0
Contact customer support siplant-support.de@siemens.com
- FixedSIPLANT V3.1
Update to V3.1.4 or later version Contact customer support siplant-support.de@siemens.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan