Information Disclosure Vulnerability in Climatix POL909 by Siemens
CVE-2021-41543

6.5MEDIUM

Key Information:

Vendor
Siemens
Status
Climatix Pol909 (awb Module)
Climatix Pol909 (awm Module)
Vendor
CVE Published:
8 March 2022

Summary

An information disclosure vulnerability exists in the web application of Climatix POL909 devices, specifically in the handling of log files. This flaw allows authenticated users to potentially access sensitive files, which could lead to unauthorized disclosure of confidential information. Users are advised to upgrade to the specified versions to mitigate risks associated with this vulnerability.

Affected Version(s)

Climatix POL909 (AWB module) All versions < V11.44

Climatix POL909 (AWM module) All versions < V11.36

References

https://cert-portal.siemens.com/productcert/pdf/ssa-25246...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.