Siemens SIMOVE Fleetmanager and SIPLANT
SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-67367DE | high8.6 | — | ||
A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions <… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT - CSAF Versionself
- SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT - HTML Versionself
- ICS Advisory ICSA-26-265-07 JSONself
- ICS Advisory ICSA-26-265-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (16)
- MitigationSIMOVE Fleetmanager V3.1
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIMOVE Fleetmanager V3.2
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIMOVE Fleetmanager V3.3
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIMOVE Fleetmanager V4.0
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V1.7
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V2.2
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V3.0
Configure appropriate user management by restricting services' access rights to project files
- MitigationSIPLANT V3.1
Configure appropriate user management by restricting services' access rights to project files
- BehobenSIMOVE Fleetmanager V3.1
Update to V3.1.13 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813191/ - BehobenSIMOVE Fleetmanager V3.2
Update to V3.2.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813191/ - BehobenSIMOVE Fleetmanager V3.3
Update to V3.3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813191/ - BehobenSIMOVE Fleetmanager V4.0
Update to V4.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110004946/ - BehobenSIPLANT V1.7
Contact customer support siplant-support.de@siemens.com
- BehobenSIPLANT V2.2
Contact customer support siplant-support.de@siemens.com
- BehobenSIPLANT V3.0
Contact customer support siplant-support.de@siemens.com
- BehobenSIPLANT V3.1
Update to V3.1.4 or later version Contact customer support siplant-support.de@siemens.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan