The vulnerability stems from the .NET Client Library for SIMATIC S7 Webserver API failing to redact PLC restore passwords from HTTP error exception messages. This omission allows an attacker who can read log or diagnostic output to obtain the plaintext restore password, potentially enabling unauthorized manipulation of the PLC. The flaw aligns with CWE‑209, which indicates sensitive data exposed through log messages.

Siemens' .NET Client Library for the SIMATIC S7 Webserver API is the affected component, with all releases prior to version 3.3.62 vulnerable. Systems that rely on these libraries and produce HTTP error exception logs are at risk if the logs are accessible to attackers.

With a CVSS score of 6.8, the issue is medium severity. No EPSS score is published, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread public exploitation yet. The attack requires access to log or diagnostic data, implying that users with read access to logs or remote monitoring capabilities could leverage the exposed passwords. Mitigating the issue reduces the potential for unauthorized PLC control.