Read the docs
TI-2021-17430 Aliases CVE-2021-40359GHSA-6gc3-vp66-4fcm

Path traversal in Siemens OpenPCS 7 V8.2

Priority LOW 36CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Update 6), SIMATIC NET PC Software V17 (All versions < V17 SP1), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files.

Why it matters now

EPSS 0.01174 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensOpenPCS 7 V8.2All versions—No fix listedCNA
SiemensOpenPCS 7 V9.0All versions < V9.0 Upd4—No fix listedCNA
SiemensOpenPCS 7 V9.1All versions—No fix listedCNA
SiemensSIMATIC BATCH V8.2All versions—No fix listedCNA
SiemensSIMATIC BATCH V9.0All versions—No fix listedCNA
SiemensSIMATIC BATCH V9.1All versions—No fix listedCNA
SiemensSIMATIC NET PC Software V14All versions—No fix listedCNA
SiemensSIMATIC NET PC Software V15All versions—No fix listedCNA
SiemensSIMATIC NET PC Software V16All versions < V16 Update 6—No fix listedCNA
SiemensSIMATIC NET PC Software V17All versions < V17 SP1—No fix listedCNA
SiemensSIMATIC PCS 7 V8.2All versions—No fix listedCNA
SiemensSIMATIC PCS 7 V9.0All versions < V9.0 SP3 UC04—No fix listedCNA
SiemensSIMATIC PCS 7 V9.1All versions < V9.1 SP1—No fix listedCNA
SiemensSIMATIC Route Control V8.2All versions—No fix listedCNA
SiemensSIMATIC Route Control V9.0All versions—No fix listedCNA
SiemensSIMATIC Route Control V9.1All versions—No fix listedCNA
SiemensSIMATIC WinCC V15 and earlierAll versions < V15 SP1 Update 7—No fix listedCNA
SiemensSIMATIC WinCC V16All versions < V16 Update 5—No fix listedCNA
SiemensSIMATIC WinCC V17All versions < V17 Update 2—No fix listedCNA
SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Update 19—No fix listedCNA
SiemensSIMATIC WinCC V7.5All versions < V7.5 SP2 Update 5—No fix listedCNA
  • OpenPCS 7 V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • OpenPCS 7 V9.0 VendorSiemens Affected All versions < V9.0 Upd4 Fixed in — No fix listed CNA
  • OpenPCS 7 V9.1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC BATCH V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC BATCH V9.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC BATCH V9.1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V14 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V15 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V16 VendorSiemens Affected All versions < V16 Update 6 Fixed in — No fix listed CNA
  • SIMATIC NET PC Software V17 VendorSiemens Affected All versions < V17 SP1 Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.0 VendorSiemens Affected All versions < V9.0 SP3 UC04 Fixed in — No fix listed CNA
  • SIMATIC PCS 7 V9.1 VendorSiemens Affected All versions < V9.1 SP1 Fixed in — No fix listed CNA
  • SIMATIC Route Control V8.2 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V9.0 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC Route Control V9.1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
  • SIMATIC WinCC V15 and earlier VendorSiemens Affected All versions < V15 SP1 Update 7 Fixed in — No fix listed CNA
  • SIMATIC WinCC V16 VendorSiemens Affected All versions < V16 Update 5 Fixed in — No fix listed CNA
  • SIMATIC WinCC V17 VendorSiemens Affected All versions < V17 Update 2 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.4 VendorSiemens Affected All versions < V7.4 SP1 Update 19 Fixed in — No fix listed CNA
  • SIMATIC WinCC V7.5 VendorSiemens Affected All versions < V7.5 SP2 Update 5 Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_batch:8.2:-:*:*:*:*:*:*8.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:8.2:upd_9:*:*:*:*:*:*8.2 upd_9VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:-:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:sp1:*:*:*:*:*:*9.0 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_1:*:*:*:*:*:*9.0 sp1_update_1VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_2:*:*:*:*:*:*9.0 sp1_update_2VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_3:*:*:*:*:*:*9.0 sp1_update_3VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_4:*:*:*:*:*:*9.0 sp1_update_4VulnerableSiemens
cpe:2.3:a:siemens:simatic_batch:9.1:-:*:*:*:*:*:*9.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc:14:-:*:*:*:*:*:*14VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_batch:8.2:-:*:*:*:*:*:* Versions 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:8.2:upd_9:*:*:*:*:*:* Versions 8.2 upd_9 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:sp1:*:*:*:*:*:* Versions 9.0 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_1:*:*:*:*:*:* Versions 9.0 sp1_update_1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_2:*:*:*:*:*:* Versions 9.0 sp1_update_2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_3:*:*:*:*:*:* Versions 9.0 sp1_update_3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.0:sp1_update_4:*:*:*:*:*:* Versions 9.0 sp1_update_4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_batch:9.1:-:*:*:*:*:*:* Versions 9.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc:14:-:*:*:*:*:*:* Versions 14 Vulnerable ·Siemens
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:siemens:simatic_net_pc:15:-:*:*:*:*:*:*15VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc:16:-:*:*:*:*:*:*16VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc:16:update1:*:*:*:*:*:*16 update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_net_pc:17:-:*:*:*:*:*:*17VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:8.2:*:*:*:*:*:*:*8.2VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:9.0:-:*:*:*:*:*:*9.0VulnerableSiemens
cpe:2.3:a:siemens:simatic_route_control:9.1:-:*:*:*:*:*:*9.1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*up to 7.4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:*:*:*:*:*:*:*7.5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*7.5VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*7.5 sp1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*7.5 sp1_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*7.5 sp1_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*7.5 sp2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*7.5 sp2_update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*7.5 sp2_update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*7.5 sp2_update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*7.5 sp2_update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:15:-:*:*:*:*:*:*15VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:-:*:*:*:*:*:*16VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:*16 update1VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:*16 update2VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:*16 update3VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:*16 update4VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:17:-:*:*:*:*:*:*17VulnerableSiemens
cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:*17 update1VulnerableSiemens
cpe:2.3:a:siemens:simaticpcs_7:*:*:*:*:*:*:*:*up to 8.2; 9.0 to before 9.1VulnerableSiemens
cpe:2.3:a:siemens:simaticpcs_7:9.1:-:*:*:*:*:*:*9.1VulnerableSiemens
  • cpe:2.3:a:siemens:simatic_net_pc:15:-:*:*:*:*:*:* Versions 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc:16:-:*:*:*:*:*:* Versions 16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc:16:update1:*:*:*:*:*:* Versions 16 update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_net_pc:17:-:*:*:*:*:*:* Versions 17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_route_control:9.1:-:*:*:*:*:*:* Versions 9.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:* Versions up to 7.4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:* Versions 7.5 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:* Versions 7.5 sp1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:* Versions 7.5 sp1_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:* Versions 7.5 sp1_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:* Versions 7.5 sp2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:* Versions 7.5 sp2_update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:* Versions 7.5 sp2_update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:* Versions 7.5 sp2_update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:* Versions 7.5 sp2_update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:15:-:*:*:*:*:*:* Versions 15 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:-:*:*:*:*:*:* Versions 16 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update1:*:*:*:*:*:* Versions 16 update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update2:*:*:*:*:*:* Versions 16 update2 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update3:*:*:*:*:*:* Versions 16 update3 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:16:update4:*:*:*:*:*:* Versions 16 update4 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:17:-:*:*:*:*:*:* Versions 17 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simatic_wincc:17:update1:*:*:*:*:*:* Versions 17 update1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simaticpcs_7:*:*:*:*:*:*:*:* Versions up to 8.2; 9.0 to before 9.1 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:simaticpcs_7:9.1:-:*:*:*:*:*:* Versions 9.1 Vulnerable ·Siemens

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-40359
  2. 2026-10-03 Alias added: GHSA-6gc3-vp66-4fcm

References

Advisory 1

  • TI-2016-04985 Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before… CVSS 3.0CRITICAL 9.8
  • TI-2018-03409 Improper input validation in Siemens OpenPCS 7 V7.1 and earlier CVSS 3.1HIGH 7.5
  • TI-2019-13902 A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All… CVSS 3.1HIGH 7.5
  • TI-2023-26225 NULL pointer dereference in Siemens OpenPCS 7 V9.1 CVSS 4.0HIGH 7.1
  • TI-2023-26224 NULL pointer dereference in Siemens OpenPCS 7 V9.1 CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences