CVE-2026-85114
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A vulnerability in .NET Client Library for SIMATIC S7 Webserver API (versions < V3.3.61) is due to lack of validation of filenames received from remote servers during ticket downloads. An attacker who can manipulate the ticket response can write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.
Risk Assessment
The risk includes the possibility of writing malicious files on the system, potentially leading to system integrity compromise and potential code execution.
Recommendation
Update the library to version V3.3.61 or later and implement filename validation during downloads.
Other vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API
Original NVD description (English source)
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS