Siemens Simatic Information Server vulnerabilities

2 vulnerabilities

Known vulnerabilities in Siemens Simatic Information Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2021-41057siemenspss_cape+8
EPSS score
0.30%
In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.9.1CVE-2021-20093siemenspss_cape+8
EPSS score
33.30%
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.