CVE-2026-85115mediumCWE-209

CVE-2026-85115: medium-severity vulnerability in Siemens .NET Client Library for SIMATIC S7…

Published · Updated

Follow this CVE+ Monitor .NET Client Library for SIMATIC S7 Webserver API

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.1%
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtain the plaintext restore password and potentially perform unauthorized operations on the PLC.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Siemens · .NET Client Library for SIMATIC S7 Webserver API
Related CVEs — Siemens .NET Client Library for SIMATIC S7…

In the same product, most dangerous first.

CVE-2026-85114HIGHCVE-2026-85114EPSS 0.3%