CVE-2026-85114
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All…
- Risk score
- 72/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability in .NET Client Library for SIMATIC S7 Webserver API (all versions < V3.3.61) allows an attacker to write arbitrary files outside the intended download directory and replace existing files. This is due to not properly validating filenames received from remote servers during ticket downloads.
- Affected
- {'products': ['SIMATIC S7 Webserver API'], 'packages': [], 'versions': ['all versions < V3.3.61']}
- Fix
- Upgrade to version V3.3.61 or later
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 7.5 high
- Remotely exploitable without logging in
- On your watchlist: .net
- Named in a government or vendor bulletin
Government and vendor bulletins
References
Original description
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.
Last activity 22 Oct 2026. Patch Forecast updates every hour.