CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-20093

CVSS 9.1v3.1pub. 2021-06-16upd. 2024-11-21

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

  • Siemens Pss Cape

    APP
    Siemens
    all versions

  • Siemens Sicam 230

    HW
    Siemens
    all versions

  • Siemens Sicam 230 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Information Server

    APP
    Siemens
    20192020

  • Siemens Simatic Pcs Neo

    APP
    Siemens
    < 3.1

  • Siemens Simatic Process Historian

    HW
    Siemens
    20202019 – 2020 (excl.)

  • Siemens Simatic Wincc Oa

    APP
    Siemens
    3.173.18

  • Siemens Simit Simulation Platform

    APP
    Siemens
    10.310.0 – 10.3 (excl.)

  • Siemens Sinec Infrastructure Network Services

    APP
    Siemens
    1.0.1< 1.0.1.1

  • Siemens Sinema Remote Connect Server

    APP
    Siemens
    3.0< 3.0

  • Wibu Codemeter

    APP
    Wibu
    ≤ 7.21a
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2025-40795CRITICAL9.3PL ✓same product

Stack-based buffer overflow w Siemens SIMATIC PCS neo i UMC — RCE bez uwierzytelnienia

CVE-2024-39872CRITICAL9.3PL ✓same product

Privilege escalation w SINEMA Remote Connect Server przez tymczasowe pliki aktualizacji

CVE-2022-32257CRITICAL9.8PL ✓same product

Siemens SINEMA Remote Connect Server — brak kontroli dostępu prowadzący do RCE

CVE-2022-25315CRITICAL9.8PL ✓same product

Integer overflow w libexpat (storeRawNames) — RCE bez uwierzytelnienia