Siemens SIMATIC S7 Webserver API: 2 CVEs, High 7.5
Summary
CISA reports 2 vulnerabilities in Siemens .NET Client Library for SIMATIC S7 Webserver API. Weakness types: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Generation of Error Message Containing Sensitive Information. .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Highest CVSS v3 score: 7.5 (High), exploitable over the network.
At a glance
- Vendor
- Siemens
- Products
- .NET Client Library for SIMATIC S7 Webserver API
- CVEs
- CVE-2026-85114, CVE-2026-85115
- Highest CVSS v3
- 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, Government Services and Facilities
- Deployed
- Worldwide
- Vendor HQ
- Germany
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-85114 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 7.5 | – | No | CVE-2026-85114 |
| CVE-2026-85115 | Generation of Error Message Containing Sensitive Information | 5.5 | – | No | CVE-2026-85115 |
Affected products (2)
- .NET Client Library for SIMATIC S7 Webserver API < V3.3.61
- .NET Client Library for SIMATIC S7 Webserver API < V3.3.62
Vendor fixes and mitigations (from advisory)
- Vendor Fix: Update to V3.3.61 or later version link
- Vendor Fix: Update to V3.3.62 or later version link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
- CISA advisory ICSA-26-295-10
- Machine-readable CSAF record
- https://cert-portal.siemens.com/productcert/csaf/ssa-390352.json
- https://cert-portal.siemens.com/productcert/html/ssa-390352.html
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.