CVEvulnerability

CVE-2021-20093

9.1 CRITICAL Published 2021-06-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-125

Description

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.

Affected configurations

• wibu codemeter (<= 7.21a) • siemens pss cape • siemens sicam 230 firmware • siemens simatic information server 2019 • siemens simatic information server 2020 • siemens simatic pcs neo (< 3.1) • siemens simatic wincc oa 3.17 • siemens simatic wincc oa 3.18 • siemens simit simulation platform (>= 10.0 < 10.3) • siemens simit simulation platform 10.3 • siemens sinec infrastructure network services (< 1.0.1.1) • siemens sinec infrastructure network services 1.0.1 • siemens sinema remote connect server (< 3.0) • siemens sinema remote connect server 3.0 • siemens simatic process historian (>= 2019 < 2020) • siemens simatic process historian 2020

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References