{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-517424.html"
      },
      {
        "category": "self",
        "summary": "SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-517424.json"
      }
    ],
    "title": "SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT",
    "tracking": {
      "current_release_date": "2026-09-08T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-517424",
      "initial_release_date": "2026-09-08T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-09-08T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "interim",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/<3.1.13",
                "product": {
                  "name": "SIMOVE Fleetmanager V3.1 < V3.1.13",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMOVE Fleetmanager V3.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/<3.2.4",
                "product": {
                  "name": "SIMOVE Fleetmanager V3.2 < V3.2.4",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMOVE Fleetmanager V3.2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/<3.3.2",
                "product": {
                  "name": "SIMOVE Fleetmanager V3.3 < V3.3.2",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMOVE Fleetmanager V3.3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/<4.0.1",
                "product": {
                  "name": "SIMOVE Fleetmanager V4.0 < V4.0.1",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMOVE Fleetmanager V4.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLANT V1.7",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLANT V1.7"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLANT V2.2",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLANT V2.2"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLANT V3.0",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLANT V3.0"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/<3.1.4",
                "product": {
                  "name": "SIPLANT V3.1 < V3.1.4",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLANT V3.1"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-67367",
      "cwe": {
        "id": "CWE-23",
        "name": "Relative Path Traversal"
      },
      "notes": [
        {
          "category": "description",
          "text": "Affected devices do not properly validate and neutralize directory traversal sequences in the file-serving endpoint of the embedded HTTP server. This could allow an unauthenticated remote attacker to read arbitrary files from the underlying operating system without any credentials, potentially exposing sensitive data such as credential stores, private keys, and configuration secrets.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Configure appropriate user management by restricting services' access rights to project files",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8"
          ]
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to affected devices",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.1.13 or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109813191/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.1.4 or later version\nContact customer support siplant-support.de@siemens.com",
          "product_ids": [
            "8"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.2.4 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109813191/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3.2 or later version",
          "product_ids": [
            "3"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109813191/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V4.0.1 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/110004946/"
        },
        {
          "category": "vendor_fix",
          "details": "Contact customer support siplant-support.de@siemens.com",
          "product_ids": [
            "5",
            "6",
            "7"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8"
          ]
        }
      ],
      "title": "CVE-2026-67367"
    }
  ]
}