cvelistv5 - cve-2021-42554

CVE-2021-42554 (GCVE-0-2021-42554)

Vulnerability from cvelistv5

Published

2022-02-03 01:40

Modified

2026-08-11 12:22

Severity ?

CWE

Summary

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

References

URL

Tags

	https://www.insyde.com/security-pledge	x_refsource_MISC
	https://www.insyde.com/security-pledge/SA-2022012	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220216-0007/	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:12:43.116Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.insyde.com/security-pledge"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.insyde.com/security-pledge/SA-2022012"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/796611"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808 - BIOS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.0.202N",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Field PG M5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V22.01.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Field PG M6",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V26.01.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC127E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V27.01.09",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC227G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC277G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC\u00a0IPC277G PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC327G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC377G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC427E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC477E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC477E PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC627E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC647E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC677E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC847E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC ITP1000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V23.01.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS IPC427E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T12:22:18.229Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-22T19:06:40.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.insyde.com/security-pledge"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.insyde.com/security-pledge/SA-2022012"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-42554",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.insyde.com/security-pledge",
              "refsource": "MISC",
              "url": "https://www.insyde.com/security-pledge"
            },
            {
              "name": "https://www.insyde.com/security-pledge/SA-2022012",
              "refsource": "MISC",
              "url": "https://www.insyde.com/security-pledge/SA-2022012"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220216-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-42554",
    "datePublished": "2022-02-03T01:40:56.000Z",
    "dateReserved": "2021-10-18T00:00:00.000Z",
    "dateUpdated": "2026-08-11T12:22:18.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CERTFR-2023-AVI-0559

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans les commutateurs Aruba. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les commutateurs Aruba séries CX 8400, CX 8325 et CX 8320 avec les systèmes d'exploitation suivants :

AOS-CX versions 10.12.x antérieures à 10.12.0006
AOS-CX versions 10.11.x antérieures à 10.11.0001
AOS-CX versions 10.10.x antérieures à 10.10.1000
AOS-CX versions 10.06.x antérieures à 10.06.0210

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Aruba ARUBA-PSA-2022-001 du 01 février 2023

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLes commutateurs Aruba s\u00e9ries CX 8400, CX 8325 et CX 8320 avec les syst\u00e8mes d\u0027exploitation suivants :\u003c/p\u003e \u003cul\u003e \u003cli\u003eAOS-CX versions 10.12.x ant\u00e9rieures \u00e0 10.12.0006\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.11.x ant\u00e9rieures \u00e0 10.11.0001\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.10.x ant\u00e9rieures \u00e0 10.10.1000\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.06.x ant\u00e9rieures \u00e0 10.06.0210\u003c/li\u003e \u003c/ul\u003e ",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-42113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42113"
    },
    {
      "name": "CVE-2021-41838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41838"
    },
    {
      "name": "CVE-2021-41840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41840"
    },
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    },
    {
      "name": "CVE-2021-41839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41839"
    },
    {
      "name": "CVE-2021-43522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43522"
    },
    {
      "name": "CVE-2020-27339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27339"
    },
    {
      "name": "CVE-2021-41610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41610"
    },
    {
      "name": "CVE-2021-41837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41837"
    },
    {
      "name": "CVE-2021-42059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42059"
    },
    {
      "name": "CVE-2021-43323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43323"
    },
    {
      "name": "CVE-2020-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5953"
    },
    {
      "name": "CVE-2021-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41841"
    },
    {
      "name": "CVE-2021-33626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33626"
    },
    {
      "name": "CVE-2021-33625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33625"
    },
    {
      "name": "CVE-2021-42554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42554"
    }
  ],
  "initial_release_date": "2023-07-19T00:00:00",
  "last_revision_date": "2023-07-19T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0559",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-07-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les commutateurs\nAruba. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de\ns\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code arbitraire et\nune \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les commutateurs Aruba",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Aruba ARUBA-PSA-2022-001 du 01 f\u00e9vrier 2023",
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-001.txt"
    }
  ]
}

CERTFR-2022-AVI-180

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Siemens . Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	SIMATIC IPC327G toutes versions
Siemens	N/A	SIMATIC IPC847E toutes versions
Siemens	N/A	SIMATIC ITP1000 toutes versions
Siemens	N/A	SIMATIC IPC277G toutes versions
Siemens	N/A	SIMATIC IPC427E toutes versions
Siemens	N/A	SIMATIC IPC477E toutes versions
Siemens	N/A	SIMATIC IPC227G toutes versions
Siemens	N/A	SIMATIC IPC377G toutes versions
Siemens	N/A	SIMATIC IPC627E toutes versions
Siemens	N/A	SIMATIC IPC647E toutes versions
Siemens	N/A	SIMATIC IPC127E toutes versions
Siemens	N/A	SIMATIC Field PG M6 toutes versions
Siemens	N/A	SIMATIC Field PG M5 toutes versions
Siemens	N/A	SIMATIC IPC677E toutes versions

References

Title

Publication Time

Tags

Bulletin de sécurité Siemens ssa-306654 du 22 février 2022	None	vendor-advisory
Bulletin de sécurité Insyde du 01 février 2022	-	other
Bulletin d'actualité CERT-FR CERTFR-2022-ACT-005 du 07 février 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SIMATIC IPC327G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC847E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC ITP1000 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC277G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC427E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC477E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC227G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC377G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC627E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC647E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC127E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC Field PG M6 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC Field PG M5 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC677E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-43615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43615"
    },
    {
      "name": "CVE-2021-42113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42113"
    },
    {
      "name": "CVE-2021-41838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41838"
    },
    {
      "name": "CVE-2022-24030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24030"
    },
    {
      "name": "CVE-2021-41840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41840"
    },
    {
      "name": "CVE-2021-45971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45971"
    },
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    },
    {
      "name": "CVE-2021-41839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41839"
    },
    {
      "name": "CVE-2021-45970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45970"
    },
    {
      "name": "CVE-2021-43522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43522"
    },
    {
      "name": "CVE-2020-27339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27339"
    },
    {
      "name": "CVE-2021-41837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41837"
    },
    {
      "name": "CVE-2021-42059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42059"
    },
    {
      "name": "CVE-2022-24069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24069"
    },
    {
      "name": "CVE-2021-43323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43323"
    },
    {
      "name": "CVE-2020-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5953"
    },
    {
      "name": "CVE-2021-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41841"
    },
    {
      "name": "CVE-2021-42060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42060"
    },
    {
      "name": "CVE-2022-24031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24031"
    },
    {
      "name": "CVE-2021-33626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33626"
    },
    {
      "name": "CVE-2021-45969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45969"
    },
    {
      "name": "CVE-2021-33625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33625"
    },
    {
      "name": "CVE-2021-42554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42554"
    }
  ],
  "initial_release_date": "2022-02-23T00:00:00",
  "last_revision_date": "2022-02-23T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Insyde du 01 f\u00e9vrier 2022",
      "url": "https://www.insyde.com/security-pledge"
    },
    {
      "title": "Bulletin d\u0027actualit\u00e9 CERT-FR CERTFR-2022-ACT-005 du 07 f\u00e9vrier 2022",
      "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2022-ACT-005/"
    }
  ],
  "reference": "CERTFR-2022-AVI-180",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Siemens . Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-306654 du 22 f\u00e9vrier 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2021-42554 (GCVE-0-2021-42554)

Vulnerability from cvelistv5

CERTFR-2023-AVI-0559

Vulnerability from certfr_avis

Solution

CERTFR-2022-AVI-180

Vulnerability from certfr_avis

Solution

Tags

Sightings

Nomenclature