# CVE-2026-85115: Siemens .NET Client Library SIMATIC S7 Webserver API information disclosure

Source: https://junglewise.ai/threats/cve-2026-85115-a-vulnerability-has-been-identified-in-net-client-library-for  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-85115 · Severity: medium · CVSS 5.5 · Published 2026-10-13

The .NET Client Library for SIMATIC S7 Webserver API is used to communicate with Siemens programmable logic controllers (PLCs) via web services. A flaw in error handling causes PLC restore passwords to be exposed in plaintext in HTTP error messages and logs. An attacker with access to application logs or diagnostic output could obtain these credentials and gain unauthorized control of critical industrial equipment.

Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2026-85115 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85115 being exploited in the wild.

**How severe is CVE-2026-85115?** Medium severity, with a CVSS score of 5.5, published 13 October 2026.

**Which products and versions are affected?** Siemens .NET Client Library for SIMATIC S7 Webserver API all versions before 3.3.62.

**Is there a fix for CVE-2026-85115?** Yes: fixed in V3.3.62 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-85115 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-85115?** Check whether you run Siemens .NET Client Library for SIMATIC S7 Webserver API at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in V3.3.62 or later

## Technical details

The vulnerability is an information disclosure flaw (CWE-209) where HTTP error exception messages fail to redact sensitive PLC restore password data. An authenticated local attacker with log file access can extract plaintext credentials from error messages, bypassing authentication and authorization controls on the PLC itself. A fix is available in version 3.3.62.

## Affected products

- Siemens .NET Client Library for SIMATIC S7 Webserver API all versions before 3.3.62

## Timeline

- 2026-10-13: disclosed

## References

- [https://cert-portal.siemens.com/productcert/html/ssa-390352.html](https://cert-portal.siemens.com/productcert/html/ssa-390352.html)

## Related threats

- [Siemens .NET Client Library for SIMATIC S7 Webserver API path traversal](https://junglewise.ai/threats/cve-2026-85114-a-vulnerability-has-been-identified-in-net-client-library-for)