CVE-2021-40359

Siemens OpenPCS 7 V8.2

HIGH 7.7

At a glance

Source: NVD
EPSS: EPSS 1.17 % · percentile 67 (2026-10-28)
State: PUBLISHED
Published: 2021-11-09 11:32 UTC
Updated: 2024-08-04 02:44 UTC
Assigner: siemens
NVD status: Modified

Description

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 6), SIMATIC NET PC Software V17 (All versions < V17 SP1), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files.

Weaknesses (CWE)

CWE-22 — Improper Limitation of a Pathname to a Restricted Directory

References

https://cert-portal.siemens.com/productcert/pdf/ssa-840188.pdf

Scores

Version	Score	Vector	Scored by
CVSS 3.1	HIGH 7.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C	siemens
CVSS 3.1	HIGH 7.7	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	HIGH 7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	NVD · nvd@nist.gov (Secondary)
CVSS 2.0	MEDIUM 5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N	NVD · nvd@nist.gov (Primary)

European references

ENISA EUVD · EUVD-2021-27537
GCVE · GCVE-0-2021-40359

CERT-FR advisories

CERTFR-2022-AVI-124 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
CERTFR-2021-AVI-854 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:a:siemens:simatic_batch:8.2:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:8.2:upd_9:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.0:sp1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_2:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_3:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_4:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_batch:9.1:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_net_pc:14:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_net_pc:15:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_net_pc:16:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_net_pc:16:update1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_net_pc:17:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_route_control:8.2:*:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_route_control:9.0:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_route_control:9.1:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:* ≤ 7.4
cpe:2.3:a:siemens:simatic_wincc:7.5:*:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:15:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:16:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:17:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:*
cpe:2.3:a:siemens:simaticpcs_7:*:*:*:*:*:*:*:* ≤ 8.2
cpe:2.3:a:siemens:simaticpcs_7:*:*:*:*:*:*:*:* ≥ 9.0 < 9.1
cpe:2.3:a:siemens:simaticpcs_7:9.1:-:*:*:*:*:*:*

Affected products

Product	Versions
Siemens · OpenPCS 7 V8.2	affected All versions
Siemens · OpenPCS 7 V9.0	affected All versions < V9.0 Upd4
Siemens · OpenPCS 7 V9.1	affected All versions
Siemens · SIMATIC BATCH V8.2	affected All versions
Siemens · SIMATIC BATCH V9.0	affected All versions
Siemens · SIMATIC BATCH V9.1	affected All versions
Siemens · SIMATIC NET PC Software V14	affected All versions
Siemens · SIMATIC NET PC Software V15	affected All versions
Siemens · SIMATIC NET PC Software V16	affected All versions < V16 Update 6
Siemens · SIMATIC NET PC Software V17	affected All versions < V17 SP1
Siemens · SIMATIC PCS 7 V8.2	affected All versions
Siemens · SIMATIC PCS 7 V9.0	affected All versions < V9.0 SP3 UC04
Siemens · SIMATIC PCS 7 V9.1	affected All versions < V9.1 SP1
Siemens · SIMATIC Route Control V8.2	affected All versions
Siemens · SIMATIC Route Control V9.0	affected All versions
Siemens · SIMATIC Route Control V9.1	affected All versions
Siemens · SIMATIC WinCC V15 and earlier	affected All versions < V15 SP1 Update 7
Siemens · SIMATIC WinCC V16	affected All versions < V16 Update 5
Siemens · SIMATIC WinCC V17	affected All versions < V17 Update 2
Siemens · SIMATIC WinCC V7.4	affected All versions < V7.4 SP1 Update 19

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD