SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API
Advisory ansehen veröffentlicht 2026-10-13
.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Client Library for SIMATIC S7 Webserver API and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-85115DE | medium5.5 | — | ||
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords… | ||||
| CVE-2026-85114DE | high7.5 | — | ||
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- Behoben.NET Client Library for SIMATIC S7 Webserver API
Update to V3.3.61 or later version
https://github.com/siemens/simatic-s7-webserver-api/releases/tag/v3.3.61 - Behoben.NET Client Library for SIMATIC S7 Webserver API
Update to V3.3.62 or later version
https://github.com/siemens/simatic-s7-webserver-api/releases/tag/v3.3.62
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan