Riskcovery

CVE-2021-27395

State
Published
Severity
Not scored
Published
Oct 12, 2021
Updated
Aug 3, 2024
Reserved
Feb 18, 2021

Read the record on cve.org

Description

A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions < SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). An interface in the software that is used for critical functionalities lacks authentication, which could allow a malicious user to maliciously insert, modify or delete data.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
SIMATIC Process Historian 2013 and earlierSiemens
  • All versionsAffected
SIMATIC Process Historian 2014Siemens
  • All versions < SP3 Update 6Affected
SIMATIC Process Historian 2019Siemens
  • All versionsAffected
SIMATIC Process Historian 2020Siemens
  • All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.