CVE-2026-85115
Received Received - Intake

Information Disclosure in SIMATIC S7 .NET Client Library

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: siemens-SADP

Description
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-85115
EUVD
EUVD-2026-98393

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Siemens .NET Client Library for SIMATIC S7 Webserver API 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-209 The product generates an error message that includes sensitive information about its environment, users, or associated data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the .NET Client Library for SIMATIC S7 Webserver API versions below V3.3.62. It improperly exposes PLC restore passwords in HTTP error messages. Attackers with access to logs could retrieve these passwords and perform unauthorized PLC operations.

Detection Guidance

Check application logs for HTTP error messages containing plaintext restore passwords. Monitor network traffic for unusual access to PLC restore functions. Inspect .NET Client Library logs for exceptions related to SIMATIC S7 Webserver API.

Impact Analysis

If you use the affected library, an attacker with log access could obtain the plaintext restore password. This may allow unauthorized changes to PLC configurations, disrupting industrial processes or causing operational damage.

Compliance Impact

This vulnerability could expose sensitive PLC restore passwords in logs or diagnostic outputs, potentially violating data protection requirements under GDPR or HIPAA if such credentials relate to personal or health data processing systems. Unauthorized access to these passwords may lead to non-compliance with security and confidentiality controls mandated by these regulations.

Mitigation Strategies

Upgrade to .NET Client Library for SIMATIC S7 Webserver API V3.3.62 or later. Review and redact any stored logs containing plaintext passwords. Restrict access to logs and diagnostic outputs containing sensitive information.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85115. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart