CVE-2021-42022

A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package All versions V21.00 SP3. When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the...

CVE-2021-42022

CVE-2021-42022 affects Siemens SIMATIC eaSie PCS 7 Skill Package: all versions before 21.00 SP3 are vulnerable to path traversal during file downloads. The issue arises from improper neutralization of elements in the pathname, allowing an attacker to resolve the path outside the restricted direct...