CVE-2021-27388
Critical
Description
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control commands on the SINAMICS Medium Voltage Products, Remote Access (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).
SeverityCritical
CVSS9.8
Exploit probability—
ProductSiemens Sinamics Sl150 Firmware
PublishedJun 15, 2021
First seenJun 15, 2021
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens sinamics_sl150_firmware | No range specified | — |
| siemens sinamics_sm150_firmware | No range specified | — |
| siemens sinamics_sm150i_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.