{"id":"CVE-2021-41543","aliases":["EUVD-2021-28561","GHSA-wx2h-56xm-3293"],"status":"published","title":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44),...","description":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44), Climatix POL909 (AWM module) (All versions \u003c V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00747,"percentile":0.55187,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284","CWE-532"],"published":"2022-03-08T11:31:12Z","modified":"2026-06-17T04:08:37Z","products":[{"vendor":"siemens","product":"climatix pol909 (awb module)"},{"vendor":"siemens","product":"climatix pol909 (awm module)"},{"vendor":"siemens","product":"climatix_pol909_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41543"},{"url":"https://github.com/advisories/GHSA-wx2h-56xm-3293"}],"sources":{"cve":[{"id":"CVE-2021-41543","description":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44), Climatix POL909 (AWM module) (All versions \u003c V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.","status":"published","published":"2022-03-08T11:31:12Z","modified":"2024-08-04T03:15:28.65Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28561","description":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44), Climatix POL909 (AWM module) (All versions \u003c V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.","status":"published","published":"2022-03-08T11:31:12Z","modified":"2024-08-04T03:15:28Z","updated_at":"2026-11-03T03:24:17.663217Z"}],"ghsa":[{"id":"GHSA-wx2h-56xm-3293","title":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44),...","description":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44), Climatix POL909 (AWM module) (All versions \u003c V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.","status":"published","published":"2022-03-09T00:00:46Z","modified":"2023-02-03T05:06:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:53:56.97591Z"}],"nvd":[{"id":"CVE-2021-41543","description":"A vulnerability has been identified in Climatix POL909 (AWB module) (All versions \u003c V11.44), Climatix POL909 (AWM module) (All versions \u003c V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.","status":"published","published":"2022-03-08T12:15:10.763Z","modified":"2026-06-17T04:08:37.22Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-532"],"updated_at":"2026-11-02T14:07:05.198719Z"}]}}