The NCCIC has released an advisory on path traversal and open redirect vulnerabilities in Siemens SIMATIC Panels. Numerous products and versions of these products are affected. Successful exploitation of these vulnerabilities could allow download of arbitrary files from the device, or allow URL redirections to untrusted websites. Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk. The NCCIC also recommends a series of defensive measures to minimize the risk of exploitation of these vulnerabilities. NCCIC/ICS-CERT.