CVE-2026-85115

MediumCVSS 5.5

Published: 13/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 13/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

A vulnerability in .NET Client Library for SIMATIC S7 Webserver API (versions < V3.3.62) involves improper redaction of PLC restore passwords from HTTP error exception messages. An attacker with access to logs or other diagnostic output could obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.

Risk Assessment

The risk includes disclosure of restore passwords, which could enable unauthorized access to PLCs and manipulation of their configuration.

Recommendation

It is recommended to upgrade to version V3.3.62 or later and ensure that passwords are not exposed in error messages.

Other vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API

CVE-2026-85114High
A vulnerability in .NET Client Library for SIMATIC S7 Webserver API (versions < V3.3.61) is due to lack of validation of filenames received from remote servers during ticket downloads. An attacker who can manipulate the ticket response can write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.

Original NVD description (English source)

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS