This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Siemens | .NET Client Library for SIMATIC S7 Webserver API | unknown |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 13 Oct 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unvalidated Ticket Response Allows Arbitrary File Write in Siemens .NET Client Library |
Tue, 13 Oct 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application. | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2026-10-13T09:18:57.499Z
Reserved: 2026-09-03T07:46:11.019Z
Link: CVE-2026-85114
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-13T10:17:20.640
Modified: 2026-10-13T10:17:20.640
Link: CVE-2026-85114
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-13T11:30:04Z