CVE-2021-44165

CWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
7.2HIGH
EPSS
2.3%
top 15.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Siemens 7kg9501-0aa01-0aa1 FirmwareSiemens 7kg9501-0aa01-2aa1 FirmwareSiemens 7kg9501-0aa31-0aa1 Firmware+2 more
Timeline
PublishedDec 14
Latest updateDec 15

Description

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages5 packages

▶CVEListV5siemens/power_meter_sicam_q100All versions < V2.41

🔴Vulnerability Details

2
GHSA
GHSA-rwp6-cpw3-hxxx: A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2↗2021-12-15
▶
CVEList
CVE-2021-44165: A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2↗2021-12-14
▶
CVE-2021-44165 (HIGH CVSS 7.2) | A vulnerability has been identified | cvebase.io