CVE-2026-67367: CWE-23: Relative Path Traversal in Siemens SIMOVE Fleetmanager V3.1

CVE-2026-67367 is a relative path traversal vulnerability (CWE-23) in Siemens SIMOVE Fleetmanager versions prior to 3.1.13, 3.2.4, 3.3.2, and 4.0.1, and in all versions of SIPLANT V1.7, V2.2, V3.0, and SIPLANT V3.1 versions before 3.1.4. The issue arises because the embedded HTTP server does not properly validate and neutralize directory traversal sequences in its file-serving endpoint. This allows an unauthenticated attacker to remotely read arbitrary files on the system without credentials, potentially exposing sensitive data such as credential stores, private keys, and configuration secrets. The CVSS v3.1 base score is 8.6, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. The vulnerability has been published and assigned by Siemens, but no official patch links were provided in the input data.

An unauthenticated remote attacker can exploit this vulnerability to read arbitrary files on the affected system. This can lead to exposure of sensitive information including credential stores, private keys, and configuration secrets. The confidentiality impact is high, but there is no direct impact on integrity or availability reported. No known exploits in the wild have been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch links were provided, users should monitor Siemens' official advisories for updates. Until a patch is available, restrict access to the embedded HTTP server and implement network-level controls to limit exposure. Avoid exposing the affected services to untrusted networks.