Lucene search
K

CVE-2021-31891

🗓️ 14 Sep 2021 10:47:31Reported by siemensType 
cvelist
 cvelist
🔗 www.cve.org👁 11 Views

A command injection vulnerability in Desigo CC, GMA-Manager, Operation Scheduler, Siveillance Control, and Siveillance Control Pro allows unauthenticated remote attackers to execute arbitrary code with root privileges via a specific HTTP GET request

Related
Affected
Refs
ReporterTitlePublishedViews
Family
CNNVD
Siemens Desigo CC 操作系统命令注入漏洞
14 Sep 202100:00
cnnvd
CNVD
Siemens Siveillance OIS Operating System Command Injection Vulnerability
15 Sep 202100:00
cnvd
CVE
CVE-2021-31891
14 Sep 202110:47
cve
EUVD
EUVD-2021-18766
7 Oct 202500:30
euvd
ICS
Siemens Siveillance OIS
14 Sep 202100:00
ics
NVD
CVE-2021-31891
14 Sep 202111:15
nvd
Prion
Command injection
14 Sep 202111:15
prion
RedhatCVE
CVE-2021-31891
22 May 202518:33
redhatcve
[
  {
    "product": "Desigo CC",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions with OIS Extension Module"
      }
    ]
  },
  {
    "product": "GMA-Manager",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions with OIS running on Debian 9 or earlier"
      }
    ]
  },
  {
    "product": "Operation Scheduler",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions with OIS running on Debian 9 or earlier"
      }
    ]
  },
  {
    "product": "Siveillance Control",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions with OIS running on Debian 9 or earlier"
      }
    ]
  },
  {
    "product": "Siveillance Control Pro",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation