.NET Client Library S7 API <3.3.61 Remote File Write CVE-2026-85114
CVE-2026-85114 Published on October 13, 2026
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write arbitrary files outside the intended download directory and, when overwriting is enabled, replace existing files accessible to the application.
Weakness Type
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2026-85114 has been classified to as a Directory traversal vulnerability or weakness.
Affected Versions
Siemens .NET Client Library for SIMATIC S7 Webserver API:- Before V3.3.61 is affected.