admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-28 17:21:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2021/CVE-2021-200xx/CVE-2021-20093.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

294 lines
9.2 KiB
JSON
Raw Blame History

{
"id": "CVE-2021-20093",
"sourceIdentifier": "vulnreport@tenable.com",
"published": "2021-06-16T12:15:12.037",
"lastModified": "2024-11-21T05:45:54.840",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server."
},
{
"lang": "es",
"value": "Se presenta una vulnerabilidad de lectura excesiva del b\u00fafer en Wibu-Systems CodeMeter versiones anteriores a 7.21a. Un atacante remoto no autenticado puede explotar este problema para revelar el contenido de la memoria de la pila o bloquear el CodeMeter Runtime Server"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
"baseScore": 6.4,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 4.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:wibu:codemeter:*:*:*:*:*:*:*:*",
"versionEndIncluding": "7.21a",
"matchCriteriaId": "703D0DCC-23C2-4E57-A273-B6BDA05D424C"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:pss_cape:-:*:*:*:*:*:*:*",
"matchCriteriaId": "890BA38B-38CD-4B6D-96E8-A786CFFE4C35"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:sicam_230_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A559DA1A-EB9D-4F93-9649-D69BF916BEE4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:sicam_230:-:*:*:*:*:*:*:*",
"matchCriteriaId": "702949EB-ED2D-4E85-802B-93EEA4FA939E"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simatic_information_server:2019:sp1:*:*:*:*:*:*",
"matchCriteriaId": "4BB95C8C-188D-430F-9D59-7F5E1832A0A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simatic_information_server:2020:-:*:*:*:*:*:*",
"matchCriteriaId": "EBF9131D-6408-443C-9322-2E31B1A87CB0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.1",
"matchCriteriaId": "884EC00C-1155-436D-94F4-C6F2303732CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simatic_wincc_oa:3.17:-:*:*:*:*:*:*",
"matchCriteriaId": "305D0C1C-16AF-4011-B449-F266FFA6FA3B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simatic_wincc_oa:3.18:-:*:*:*:*:*:*",
"matchCriteriaId": "2832A89E-57BE-4BB2-94AC-17DC3CFD91FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simit_simulation_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.0",
"versionEndExcluding": "10.3",
"matchCriteriaId": "64235511-8464-440C-ACD4-B3D046552735"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:simit_simulation_platform:10.3:-:*:*:*:*:*:*",
"matchCriteriaId": "2603C1BD-9B47-4936-B1D2-6D425B764B81"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.0.1.1",
"matchCriteriaId": "B0F46497-4AB0-49A7-9453-CC26837BF253"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:sinec_infrastructure_network_services:1.0.1:-:*:*:*:*:*:*",
"matchCriteriaId": "5145C088-C0B0-44EB-A852-74695BCF3806"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.0",
"matchCriteriaId": "F65F9901-F4BD-4484-9749-D5022245D686"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:-:*:*:*:*:*:*",
"matchCriteriaId": "4F03BAD5-7B90-4212-ACBC-3C878C02CDAA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:siemens:sinema_remote_connect_server:3.0:sp1:*:*:*:*:*:*",
"matchCriteriaId": "E5BACE03-50A7-4279-8CA5-2BB95224D485"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:h:siemens:simatic_process_historian:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2019",
"versionEndExcluding": "2020",
"matchCriteriaId": "73659BCA-7F7A-45D4-AB01-07932B16EA59"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:h:siemens:simatic_process_historian:2020:-:*:*:*:*:*:*",
"matchCriteriaId": "C5DB15E6-296B-48DE-945E-48196595B58B"
}
]
}
]
}
],
"references": [
{
"url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-01.pdf",
"source": "vulnreport@tenable.com",
"tags": [
"Mitigation",
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf",
"source": "vulnreport@tenable.com",
"tags": [
"Patch",
"Third Party Advisory"
]
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-210-02",
"source": "vulnreport@tenable.com",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
},
{
"url": "https://www.tenable.com/security/research/tra-2021-24",
"source": "vulnreport@tenable.com",
"tags": [
"Exploit",
"Patch",
"Third Party Advisory"
]
},
{
"url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-01.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
]
},
{
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-210-02",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
},
{
"url": "https://www.tenable.com/security/research/tra-2021-24",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Patch",
"Third Party Advisory"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink