by Kastro
Paper/Archive/CVE-2026-67367

CVE-2026-67367

Siemens SIMOVE Fleetmanager V3.1 — A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4…

EPSS 1%CVSS 9.2
critical.is priorityof 100
41
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 65.8.658 × 2013.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < V3.3.2), SIMOVE Fleetmanager V4.0 (All versions < V4.0.1), SIPLANT V1.7 (All versions), SIPLANT V2.2 (All versions), SIPLANT V3.0 (All versions), SIPLANT V3.1 (All versions < V3.1.4). Affected devices do not properly validate and neutralize directory traversal sequences in the file-serving endpoint of the embedded HTTP server. This could allow an unauthenticated remote attacker to read arbitrary files from the underlying operating system without any credentials, potentially exposing sensitive data such as credential stores, private keys, and configuration secrets.

Affected

ProductAffectedFixed inSource
SIMOVE Fleetmanager V3.1< V3.1.13V3.1.13CNA
SIMOVE Fleetmanager V3.2< V3.2.4V3.2.4CNA
SIMOVE Fleetmanager V3.3< V3.3.2V3.3.2CNA
SIMOVE Fleetmanager V4.0< V4.0.1V4.0.1CNA
SIPLANT V1.7all versions–CNA
SIPLANT V2.2all versions–CNA
SIPLANT V3.0all versions–CNA
SIPLANT V3.1< V3.1.4V3.1.4CNA

Scores by source

siemens (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
siemens (CNA)8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcert-portal.siemens.com/productcert/html/ssa-517424.html