CVE-2021-37181 Deserialization in Cerberus DMS V4.0
Unauthenticated attackers can execute arbitrary code via unsafe deserialization in Siemens Cerberus DMS and Desigo CC building management systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-37181?
CVE-2021-37181 is a critical unsafe deserialization vulnerability in Siemens Cerberus DMS V4.0, published on 14 Sep 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC Compact V4.0 (All versions), Desigo CC Compact V4.1 (All versions), Desigo CC Compact V4.2 (All versions), Desigo CC Compact V5.0 (All versions < V5.0 QU1), Desigo CC V4.0 (All versions), Desigo CC V4.1 (All versions), Desigo CC V4.2 (All versions), Desigo CC V5.0 (All versions < V5.0 QU1). The application deserialises untrusted data without sufficient validations, that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system. The CCOM communication component used for Windows App / Click-Once and IE Web / XBAP client connectivity are affected by the vulnerability.
Weakness: CWE-502
Which versions are affected by CVE-2021-37181?
It affects 3 products.
Products include Siemens Cerberus Dms, Siemens Desigo Cc, Siemens Desigo Cc Compact.
How do I fix CVE-2021-37181?
No fix has been published for CVE-2021-37181 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2021-37181 being exploited?
There is no known exploitation of CVE-2021-37181 in the wild and no public exploit code.
Other vulnerabilities in Siemens Cerberus DMS V4.0
Sources
Also known as GHSA-xxcg-h8cr-979m.