Vulmon
Critical Infrastructure Sectors: Critical Manufacturing
A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files. The affected file download function is disabled by default.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
siemens simatic easie pcs 7 skill |
||
siemens simatic easie pcs 7 skill 21.00 |