Siemens SIMOVE Fleetmanager and SIPLANT Path Traversal Vulnerability

Siemens ProductCERT has identified a path traversal vulnerability in SIMOVE Fleetmanager and SIPLANT, tracked as CVE-2026-67367. The vulnerability affects the embedded HTTP server component within these products. Specifically, the affected devices do not properly validate and neutralize directory traversal sequences in the file-serving endpoint of the embedded HTTP server.

An unauthenticated remote attacker could exploit this vulnerability to read arbitrary files from the underlying operating system without requiring any credentials. Potential exposed data includes credential stores, private keys, and configuration secrets.

The following product versions are affected:
- SIMOVE Fleetmanager V3.1 versions earlier than V3.1.13
- SIMOVE Fleetmanager V3.2 versions earlier than V3.2.4
- SIMOVE Fleetmanager V3.3 versions earlier than V3.3.2
- SIMOVE Fleetmanager V4.0 versions earlier than V4.0.1
- SIPLANT V1.7
- SIPLANT V2.2
- SIPLANT V3.0
- SIPLANT V3.1 versions earlier than V3.1.4

Siemens has assigned a CVSS 3.1 base score of 8.6, classifying the vulnerability as HIGH. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

Siemens ProductCERT reported the vulnerability to CISA. Vendor fixes are available as updates to the specified minimum versions. Siemens also recommends restricting network access to affected devices and implementing appropriate user management to limit services' access rights to project files.

For further information, see Siemens Security Advisory SSA-517424.