CVE-2026-67367

Deferred Deferred - Pending Action

Path Traversal in SIMOVE Fleetmanager

Publication date: 2026-09-08

Last updated on: 2026-09-09

Assigner: siemens-SADP

Description

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < V3.3.2), SIMOVE Fleetmanager V4.0 (All versions < V4.0.1), SIPLANT V1.7 (All versions), SIPLANT V2.2 (All versions), SIPLANT V3.0 (All versions), SIPLANT V3.1 (All versions < V3.1.4). Affected devices do not properly validate and neutralize directory traversal sequences in the file-serving endpoint of the embedded HTTP server. This could allow an unauthenticated remote attacker to read arbitrary files from the underlying operating system without any credentials, potentially exposing sensitive data such as credential stores, private keys, and configuration secrets.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-09

Generated

2026-09-28

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-67367

EUVD

EUVD-2026-72669

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	simoive_fleetmanager	to 3.1.13 (exc)
siemens	simoive_fleetmanager	to 3.2.4 (exc)
siemens	simoive_fleetmanager	to 3.3.2 (exc)
siemens	simoive_fleetmanager	to 4.0.1 (exc)
siplant	siplant	1.7
siplant	siplant	2.2
siplant	siplant	3.0
siplant	siplant	to 3.1.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-23	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

This is a path traversal vulnerability in SIMOVE Fleetmanager and SIPLANT products. It allows unauthenticated remote attackers to read arbitrary files from the underlying operating system by exploiting improper validation of directory traversal sequences in the embedded HTTP server. This could expose sensitive data such as credentials, private keys, and configuration secrets.

Detection Guidance

To detect this vulnerability, check if your SIMOVE Fleetmanager or SIPLANT devices are running affected versions. Verify the installed versions against the advisory (SIMOVE Fleetmanager < V3.1.13, V3.2.4, V3.3.2, V4.0.1; SIPLANT < V3.1.4). Use network scanning tools to identify exposed HTTP servers on these devices and test for path traversal attempts by sending requests with directory traversal sequences like '../' or '..%2f'.

Impact Analysis

An attacker could exploit this to access sensitive files without credentials, potentially stealing confidential information like credentials, private keys, or configuration secrets. This could lead to further attacks, data breaches, or unauthorized system access.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Exposure of personal or confidential data could result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Immediately update SIMOVE Fleetmanager to versions V3.1.13 or later, V3.2.4 or later, V3.3.2 or later, or V4.0.1 or later. For SIPLANT, update to V3.1.4 or later. If updating is not possible, restrict network access to affected devices and configure strict user management with limited access rights. Contact Siemens support for guidance on unsupported SIPLANT versions.

Hi! I’m here to help you understand CVE-2026-67367. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70