{"id":"CVE-2021-44165","aliases":["EUVD-2021-31015","GHSA-rwp6-cpw3-hxxx"],"status":"published","title":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER...","description":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02672,"percentile":0.85982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2021-12-14T12:06:52Z","modified":"2026-06-17T04:11:58Z","products":[{"vendor":"siemens","product":"7kg9501-0aa01-0aa1_firmware"},{"vendor":"siemens","product":"7kg9501-0aa01-2aa1_firmware"},{"vendor":"siemens","product":"7kg9501-0aa31-0aa1_firmware"},{"vendor":"siemens","product":"7kg9501-0aa31-2aa1_firmware"},{"vendor":"siemens","product":"power meter sicam q100"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-496292.pdf","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44165"},{"url":"https://github.com/advisories/GHSA-rwp6-cpw3-hxxx"}],"sources":{"cve":[{"id":"CVE-2021-44165","description":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.","status":"published","published":"2021-12-14T12:06:52Z","modified":"2024-08-04T04:17:24.538Z","cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-31015","description":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.","status":"published","published":"2021-12-14T12:06:52Z","modified":"2024-08-04T04:17:24Z","updated_at":"2026-11-03T03:24:12.005069Z"}],"ghsa":[{"id":"GHSA-rwp6-cpw3-hxxx","title":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER...","description":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.","status":"published","published":"2021-12-15T00:01:15Z","modified":"2023-02-01T05:06:48Z","cwes":["CWE-121"],"updated_at":"2026-11-02T14:50:25.548742Z"}],"nvd":[{"id":"CVE-2021-44165","description":"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41), POWER METER SICAM Q100 (All versions \u003c V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.","status":"published","published":"2021-12-14T12:15:10.923Z","modified":"2026-06-17T04:11:58.987Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:07:02.189991Z"}]}}