Siemens Simatic Information Server vulnerabilities

CVE-2021-41057 [HIGH] CWE-59 CVE-2021-41057: In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite th In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.

CVE-2021-20093 [CRITICAL] CWE-125 CVE-2021-20093: A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticat A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.