CVE-2021-31891CWE-78

CVE-2021-31891: fallo en Siemens Desigo CC

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Desigo CC+ Monitorear Siveillance Control

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 3.8%
A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GET request which could lead to command injection. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the system with root privileges.
Productos afectados
Siemens · Desigo CCSiemens · GMA-ManagerSiemens · Operation SchedulerSiemens · Siveillance ControlSiemens · Siveillance Control Pro
CVEs relacionadas — Siemens Desigo CC

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-33139—CVE-2022-33139EPSS 1.3%CVE-2024-23815HIGHCVE-2024-23815EPSS 0.6%