ByteOS Network

CVE Vulnerability Details :

CVE-2026-41551

PUBLISHED

More Info Official Page

Assigner-siemens

Assigner Org ID-cec7a2ec-15b4-4faf-bd53-b40f371f3a77

Published At-12 May, 2026 | 08:21

Updated At-12 May, 2026 | 08:21

▼CVE Numbering Authority (CNA)

A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnerability because user input is not properly sanitized. This could allow a remote attacker to access arbitrary files on the device.

Affected Products

Vendor

Siemens AG

Product

ROS#

Default Status

unknown

Versions

Affected

From 0 before V2.2.2 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-23	CWE-23: Relative Path Traversal

Type: CWE

CWE ID: CWE-23

Description: CWE-23: Relative Path Traversal

Metrics

Version	Base score	Base severity	Vector
3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
4.0	9.3	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Version: 4.0

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/html/ssa-357982.html	N/A

Hyperlink: https://cert-portal.siemens.com/productcert/html/ssa-357982.html

Resource: N/A

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References