CVE-2021-31891CWE-78

CVE-2021-31891: falha em Siemens Desigo CC

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Desigo CC+ Monitorar Siveillance Control

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.8%
A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GET request which could lead to command injection. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the system with root privileges.
Produtos afetados
Siemens · Desigo CCSiemens · GMA-ManagerSiemens · Operation SchedulerSiemens · Siveillance ControlSiemens · Siveillance Control Pro
CVEs relacionadas — Siemens Desigo CC

No mesmo produto, das mais perigosas para as menos.

CVE-2022-33139—CVE-2022-33139EPSS 1.3%CVE-2024-23815HIGHCVE-2024-23815EPSS 0.6%