CVE-2021-41057

No fix known EPSS <1%

In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.

Published 2021-11-14 · CVE record · OSV

Products: wibu codemeter_runtime, siemens pss_cape, siemens pss_e, siemens pss_odms, siemens sicam_230, siemens simatic_information_server, Siemens SIMATIC PCS neo, siemens simatic_process_historian, Siemens SIMATIC WinCC OA, siemens simit