Siemens SIMATIC S7 Webserver API
view advisory published 2026-10-13
.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-85115DE | medium5.5 | — | ||
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords… | ||||
| CVE-2026-85114DE | high7.5 | — | ||
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API - CSAF Versionself
- SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API - HTML Versionself
- ICS Advisory icsa-26-295-10 JSONself
- ICS Advisory icsa-26-295-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- Fixed.NET Client Library for SIMATIC S7 Webserver API
Update to V3.3.61 or later version
https://github.com/siemens/simatic-s7-webserver-api/releases/tag/v3.3.61 - Fixed.NET Client Library for SIMATIC S7 Webserver API
Update to V3.3.62 or later version
https://github.com/siemens/simatic-s7-webserver-api/releases/tag/v3.3.62
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan