Read the docs
TI-2021-17429 Aliases CVE-2021-40358GHSA-rcjv-2hj5-3cmq

Path traversal in Siemens SIMATIC PCS 7 V8.2

Priority MEDIUM 45CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). Legitimate file operations on the web server of the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read, write or delete unexpected critical files.

Why it matters now

EPSS 0.01274 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSIMATIC PCS 7 V8.2All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V9.0All versions < V9.0 SP3 UC04—No fix listedCNA
SiemensSIMATIC PCS 7 V9.1All versions < V9.1 SP1—No fix listedCNA
SiemensSIMATIC WinCC V15 and earlierAll versions < V15 SP1 Update 7—No fix listedCNA
SiemensSIMATIC WinCC V16All versions < V16 Update 5—No fix listedCNA
SiemensSIMATIC WinCC V17All versions < V17 Update 2—No fix listedCNA
SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Update 19—No fix listedCNA
SiemensSIMATIC WinCC V7.5All versions < V7.5 SP2 Update 5—No fix listedCNA
  • SIMATIC PCS 7 V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.0 VendorSiemens Affected All versions < V9.0 SP3 UC04 Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.1 VendorSiemens Affected All versions < V9.1 SP1 Fixed in — No fix listed CNA
  • SIMATIC WinCC V15 and earlier VendorSiemens Affected All versions < V15 SP1 Update 7 Fixed in — No fix listed CNA
  • SIMATIC WinCC V16 VendorSiemens Affected All versions < V16 Update 5 Fixed in — No fix listed CNA
  • SIMATIC WinCC V17 VendorSiemens Affected All versions < V17 Update 2 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.4 VendorSiemens Affected All versions < V7.4 SP1 Update 19 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.5 VendorSiemens Affected All versions < V7.5 SP2 Update 5 Fixed in — No fix listed CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_pcs_7:8.2:*:*:*:*:*:*:*8.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:*9.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:*:*:*:*:*:*:*7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:*7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:*7.4 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update1:*:*:*:*:*:*7.4 sp1_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update10:*:*:*:*:*:*7.4 sp1_update10VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update11:*:*:*:*:*:*7.4 sp1_update11VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update12:*:*:*:*:*:*7.4 sp1_update12VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_pcs_7:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:* Versions 9.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:* Versions 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:* Versions 7.4 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update1:*:*:*:*:*:* Versions 7.4 sp1_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update10:*:*:*:*:*:* Versions 7.4 sp1_update10 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update11:*:*:*:*:*:* Versions 7.4 sp1_update11 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update12:*:*:*:*:*:* Versions 7.4 sp1_update12 Vulnerable ·Siemens
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update13:*:*:*:*:*:*7.4 sp1_update13VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update14:*:*:*:*:*:*7.4 sp1_update14VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update15:*:*:*:*:*:*7.4 sp1_update15VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update16:*:*:*:*:*:*7.4 sp1_update16VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update17:*:*:*:*:*:*7.4 sp1_update17VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update18:*:*:*:*:*:*7.4 sp1_update18VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update2:*:*:*:*:*:*7.4 sp1_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update3:*:*:*:*:*:*7.4 sp1_update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update4:*:*:*:*:*:*7.4 sp1_update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update5:*:*:*:*:*:*7.4 sp1_update5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update6:*:*:*:*:*:*7.4 sp1_update6VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update7:*:*:*:*:*:*7.4 sp1_update7VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update8:*:*:*:*:*:*7.4 sp1_update8VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update9:*:*:*:*:*:*7.4 sp1_update9VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.4:update_1:*:*:*:*:*:*7.4 update_1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*7.5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*7.5 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*7.5 sp1_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*7.5 sp1_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*7.5 sp2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*7.5 sp2_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*7.5 sp2_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*7.5 sp2_update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*7.5 sp2_update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15:*:*:*:*:*:*:*15VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:-:*:*:*:*:*:*15.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_1:*:*:*:*:*:*15.1 update_1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_2:*:*:*:*:*:*15.1 update_2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_3:*:*:*:*:*:*15.1 update_3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_4:*:*:*:*:*:*15.1 update_4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_5:*:*:*:*:*:*15.1 update_5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15.1:update_6:*:*:*:*:*:*15.1 update_6VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:*16 update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:*16 update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:*16 update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:*16 update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:17:*:*:*:*:*:*:*17VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:*17 update1VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update13:*:*:*:*:*:* Versions 7.4 sp1_update13 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update14:*:*:*:*:*:* Versions 7.4 sp1_update14 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update15:*:*:*:*:*:* Versions 7.4 sp1_update15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update16:*:*:*:*:*:* Versions 7.4 sp1_update16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update17:*:*:*:*:*:* Versions 7.4 sp1_update17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update18:*:*:*:*:*:* Versions 7.4 sp1_update18 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update2:*:*:*:*:*:* Versions 7.4 sp1_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update3:*:*:*:*:*:* Versions 7.4 sp1_update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update4:*:*:*:*:*:* Versions 7.4 sp1_update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update5:*:*:*:*:*:* Versions 7.4 sp1_update5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update6:*:*:*:*:*:* Versions 7.4 sp1_update6 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update7:*:*:*:*:*:* Versions 7.4 sp1_update7 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update8:*:*:*:*:*:* Versions 7.4 sp1_update8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update9:*:*:*:*:*:* Versions 7.4 sp1_update9 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.4:update_1:*:*:*:*:*:* Versions 7.4 update_1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:* Versions 7.5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:* Versions 7.5 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:* Versions 7.5 sp1_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:* Versions 7.5 sp1_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:* Versions 7.5 sp2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:* Versions 7.5 sp2_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:* Versions 7.5 sp2_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:* Versions 7.5 sp2_update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:* Versions 7.5 sp2_update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15:*:*:*:*:*:*:* Versions 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_1:*:*:*:*:*:* Versions 15.1 update_1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_2:*:*:*:*:*:* Versions 15.1 update_2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_3:*:*:*:*:*:* Versions 15.1 update_3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_4:*:*:*:*:*:* Versions 15.1 update_4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_5:*:*:*:*:*:* Versions 15.1 update_5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15.1:update_6:*:*:*:*:*:* Versions 15.1 update_6 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:* Versions 16 update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:* Versions 16 update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:* Versions 16 update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:* Versions 16 update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:17:*:*:*:*:*:*:* Versions 17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:* Versions 17 update1 Vulnerable ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-40358
  2. 2026-10-03 Alias added: GHSA-rcjv-2hj5-3cmq

References

Advisory 1

  • TI-2014-07026 The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3… CVSS 2.0HIGH 10.0
  • TI-2019-08143 Missing authentication in Siemens SIMATIC PCS 7 V8.0 and earlier CVSS 3.1CRITICAL 9.8
  • TI-2023-11164 Code injection in Siemens SIMATIC PCS 7 CVSS 3.1CRITICAL 10.0
  • TI-2019-08139 A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)… CVSS 3.1HIGH 8.8
  • TI-2019-08137 SQL injection in Siemens SIMATIC PCS 7 V8.0 and earlier CVSS 3.1HIGH 8.8
  • TI-2021-17431 Information disclosure in Siemens SIMATIC PCS 7 V8.2 CVSS 3.1HIGH 8.8
See all 24 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences