Vulnerabilities

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62).

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

5.5

Exposure class

OT / ICS

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-85115 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 26
   CISA advisory CISA 9d ago

   Siemens SIMATIC S7 Webserver API

   CVSS 3.1 Fix available CVE-2026-85114CVE-2026-85115 Siemens
2. 21
   CVE NVD 18d ago

   A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).

   CVSS 7.5 CVE-2026-85114 Siemens