Skip to content
fr Sign in
Not rated

CVE-2021-42022 A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3)

Description

A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files. The affected file download function is disabled by default.

Affected products and versions

Product Affected versions Fixed in
SIMATIC eaSie PCS 7 Skill Package Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC eaSie PCS 7 Skill Package

The 3 CVEs of SIMATIC eaSie PCS 7 Skill Package →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 High
Track this CVE