CVE-2021-40357

EUVD-2021-27535

14.09.2021, 11:15

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Teamcenter Active Workspace V5.1 (All versions < V5.1.5), Teamcenter Active Workspace V5.2 (All versions < V5.2.1). A path traversal vulnerability in the application could allow an attacker to bypass certain restrictions such as direct access to other services within the host.

Path Traversal

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.9 MEDIUM	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 68%

Affected Products (NVD)

Vendor	Product	Version
siemens	teamcenter_active_workspace	4.3.0 ≤ 𝑥 < 4.3.10
siemens	teamcenter_active_workspace	5.0.0 ≤ 𝑥 < 5.0.8
siemens	teamcenter_active_workspace	5.1.0 ≤ 𝑥 < 5.1.5
siemens	teamcenter_active_workspace	5.2.0 ≤ 𝑥 < 5.2.1

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf