Path Traversal in Siemens Openpcs 7 V8.2
CVE-2021-40359
A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 6), SIMATIC NET PC Software V17 (All versions < V17 SP1), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.012 (67.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 67th percentile — 67.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- Siemens Openpcs 7 V8.2 — versions All versions
- Siemens Openpcs 7 V9.0 — versions All versions < V9.0 Upd4
- Siemens Openpcs 7 V9.1 — versions All versions
- Siemens Simatic Batch — versions 8.2, 9.0, 9.1
- Siemens Simatic Batch V8.2 — versions All versions
- Siemens Simatic Batch V9.0 — versions All versions
- Siemens Simatic Batch V9.1 — versions All versions
- Siemens Simatic Net Pc — versions 14, 15, 16
- Siemens Simatic Net Pc Software V14 — versions All versions
- Siemens Simatic Net Pc Software V15 — versions All versions
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-840188.pdf (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-40359?
- CVE-2021-40359 is a high-severity vulnerability in Siemens Openpcs 7 V8.2, classified under Path Traversal. CVSS score: 7.7/10. Published 2021-11-09.
- How severe is CVE-2021-40359?
- High severity. CVSS v3 base score is 7.7 out of 10.