[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fH3qGnSXC05gTlF8rRNLN6Ki_3HxTEaTT5W1yjhLye9c":3,"g5a-risk:CVE-2021-27395":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":59,"references":60,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":126,"notableEvents":127},"CVE-2021-27395","What is CVE-2021-27395?","A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions \u003C SP3 Update 6), SIMATIC Process Historian 2019 (All versions), SIMATIC Process Historian 2020 (All versions). An interface in the software that is used for critical functionalities lacks authentication, which could allow a malicious user to maliciously insert, modify or delete data.","A vulnerability has been identified in SIMATIC Process Historian 2013 and earlier (All versions), SIMATIC Process Historian 2014 (All versions \u003C SP3 Update 6...","2021-10-12T10:15:11.493","2021-10-19T01:11:52.747",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.2,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:P","SINGLE","PARTIAL",5.5,"MEDIUM",8,4.9,0.00801,[40,40,40,40,40,40,40],"High",[44,49,53,56],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"siemens","simatic_process_historian_2013","*","cpe:2.3:a:siemens:simatic_process_historian_2013:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"simatic_process_historian_2014","-","cpe:2.3:a:siemens:simatic_process_historian_2014:-:sp1:*:*:*:*:*:*",{"vendor":45,"product":54,"version":47,"criteria":55,"vulnerable":4},"simatic_process_historian_2019","cpe:2.3:a:siemens:simatic_process_historian_2019:*:*:*:*:*:*:*:*",{"vendor":45,"product":57,"version":47,"criteria":58,"vulnerable":4},"simatic_process_historian_2020","cpe:2.3:a:siemens:simatic_process_historian_2020:*:*:*:*:*:*:*:*",4,[61],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-766247.pdf","Siemens",[65],"Vendor Advisory",1,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2021-27395? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-27395, a high severity cyber security vulnerability from 2021. A vulnerability has been identified in SIMATIC Process Hist...","CVE-2021-27395, CVE-2021-27395 vulnerability, CVE-2021-27395 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, siemens security, simatic_process_historian_2013 vulnerability, simatic_process_historian_2014 vulnerability, simatic_process_historian_2019 vulnerability, simatic_process_historian_2020 vulnerability","\u002Fwhat-is\u002Fcve-2021-27395",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-27395","Cybersecurity","CVE-2021-27395, CVE-2021-27395 vulnerability, CVE-2021-27395 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109,111,113,116,119,122,124],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"78883EE0-420B-49C6-B8C6-64915216504E",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0D802BDB-8F9C-481E-A152-CAF4347C8B3B",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_process_historian_2014:-:sp2:*:*:*:*:*:*","FEBF81AD-7354-4CD5-89A4-0088F6C00721",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_process_historian_2014:-:sp3:*:*:*:*:*:*","DA9B2CB2-5D15-4470-9DBC-E168F12F3880",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_process_historian_2014:-:sp3_update4:*:*:*:*:*:*","98216800-858E-4C6E-B086-0F5E56888C9C",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"81E1CC4F-602E-4DF8-9B4F-E52AF18C9B07",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E89C6F2E-C7A9-4ACE-9247-4CE06BE90C53",[],[],{"lastModified":11,"cacheTime":129,"version":32},1792359956301,{"score":131,"band":132,"action":133,"scoredAt":134},46,"Medium","Plan remediation","2026-10-16T06:52:15.967863+00:00"]