CVE-2021-20093

🗓️ 16 Jun 2021 11:09:02Reported by tenableType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 110 Views

A buffer over-read vulnerability in Wibu-Systems CodeMeter < 7.21

Reporter	Title	Published	Views	Family All 17
CNNVD	Wibu-Systems CodeMeter 缓冲区错误漏洞	16 Jun 202100:00	–	cnnvd
CNVD	Wibu-Systems CodeMeter CmWAN Denial of Service Vulnerability (CNVD-2021-47659)	21 Jun 202100:00	–	cnvd
Tenable Nessus	CodeMeter Runtime Buffer Over-read (WIBU-210423-01)	23 Jun 202100:00	–	nessus
Tenable Nessus	Siemens Buffer Over-Read in Wibu-Systems CodeMeter Runtime (CVE-2021-20093)	7 Nov 202200:00	–	nessus
Tenable Nessus	Siemens Buffer Over-Read in Wibu-Systems CodeMeter Runtime (CVE-2021-20094)	28 Feb 202300:00	–	nessus
Cvelist	CVE-2021-20093	16 Jun 202111:09	–	cvelist
EUVD	EUVD-2021-7550	3 Oct 202520:07	–	euvd
ICS	Wibu-Systems CodeMeter Runtime	13 Jul 202100:00	–	ics
ICS	Siemens Desigo CC product family	14 Nov 202300:00	–	ics
NCSC	Vulnerability fixed in Siemens SIMIT	13 Jul 202100:00	–	ncsc

NVD

Node

wibu codemeterRange≤7.21a

Node

siemens pss_capeMatch-

Node

siemens sicam_230_firmware

AND

siemens sicam_230Match-

Node

siemens simatic_information_serverMatch2019sp1

siemens simatic_information_serverMatch2020-

siemens simatic_pcs_neoRange<3.1

siemens simatic_wincc_oaMatch3.17-

siemens simatic_wincc_oaMatch3.18-

siemens simit_simulation_platformRange10.0–10.3

siemens simit_simulation_platformMatch10.3-

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

siemens sinec_infrastructure_network_servicesMatch1.0.1-

siemens sinema_remote_connect_serverRange<3.0

siemens sinema_remote_connect_serverMatch3.0-

siemens sinema_remote_connect_serverMatch3.0sp1

siemens simatic_process_historianRange2019–2020

siemens simatic_process_historianMatch2020-

[
  {
    "product": "Wibu-Systems CodeMeter",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.21a"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf
tenable	www.tenable.com/security/research/tra-2021-24
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-210-02
cdn	www.cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-01.pdf

21 Nov 2024 05:45Current

9.1High risk

Vulners AI Score9.1

CVSS 26.4

CVSS 3.19.1

EPSS0.08202

CWE-125