Summary
SIMATIC eaSie PCS 7 Skill Package contains a path traversal vulnerability that could allow an authenticated remote attacker to read arbitrary files for the application server.
Siemens has released an update for the SIMATIC eaSie PCS 7 Skill Package and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3). When downloading …
Revision history
-
#1
Publication Date
References
-
SSA-199605: Arbitrary File Download Vulnerability in SIMATIC eaSie PCS 7 Skill Package - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-199605.pdf
-
SSA-199605: Arbitrary File Download Vulnerability in SIMATIC eaSie PCS 7 Skill Package - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-199605.txt