Siemens ROS# Path Traversal Vulnerability Allowing Arbitrary File Access

A path traversal vulnerability has been identified in Siemens ROS# versions prior to 2.2.2. This vulnerability arises because user input is not properly sanitized, potentially allowing remote attackers to access arbitrary files on the device. The accessed files could be read or written, depending on the user rights of the account running the affected service.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files on the device, with the ability to read or write those files based on the user rights of the service account.

Remediation

Users are advised to update ROS# to version 2.2.2 or later. For specific mitigation strategies, refer to the Siemens Security Advisory SSA-357982.