Buffer Overflow Vulnerability in POWER METER SICAM Q100 from Siemens

CVE-2021-44165

What is CVE-2021-44165?

A critical vulnerability has been identified in the POWER METER SICAM Q100, specifically in all versions prior to V2.41. This buffer overflow affects the device's web application, enabling a remote attacker with engineer or admin privileges to exploit the flaw and potentially execute arbitrary code. It is crucial for users and administrators of the affected product to apply the necessary updates to mitigate security risks.

References