CVE-2021-27395: High severity siemens simatic process historian vulnerability
A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions < SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). An interface in the software that is used for critical functionalities lacks authentication, which could allow a malicious user to maliciously insert, modify or delete data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-27395?
CVE-2021-27395 is considered a critical vulnerability affecting multiple versions of Siemens SIMATIC Process Historian.
How do I fix CVE-2021-27395?
To fix CVE-2021-27395, upgrade to a supported version of Siemens SIMATIC Process Historian as outlined in the vendor’s advisory.
Which versions of Siemens SIMATIC Process Historian are affected by CVE-2021-27395?
CVE-2021-27395 affects SIMATIC Process Historian 2013 and earlier, 2014 versions prior to SP3 Update 6, 2019, and 2020 versions.
What kind of vulnerability is CVE-2021-27395?
CVE-2021-27395 is an interface vulnerability that may allow unauthorized access to sensitive data.
Where can I find more information on CVE-2021-27395?
More detailed information on CVE-2021-27395 can be found in the Siemens product security advisory.