Log in Start free

Vulnerability · Published Dec 14, 2021 · Assigned by siemens

CVE-2021-44165

High 7.2

In plain English

A high-severity stack buffer overflow in POWER METER SICAM Q100 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.7% (higher than 86% of all known vulnerabilities).

Severity (CVSS NVD)7.2High
Exploit odds (30 days)2.7%top 14.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.

Affected products (as reported)

VendorProductVersions
Siemens POWER METER SICAM Q100 All versions < V2.41
Siemens POWER METER SICAM Q100 All versions < V2.41
Siemens POWER METER SICAM Q100 All versions < V2.41
Siemens POWER METER SICAM Q100 All versions < V2.41

Weakness: CWE-121

References