CVE-2021-27395

Name of the Vulnerable Software and Affected Versions SIMATIC Process Historian versions prior to 2014 SP3 Update 6 SIMATIC Process Historian 2019 versions SIMATIC Process Historian 2020 versions

Description A vulnerability has been identified in the software where an interface used for critical functionalities lacks authentication. This could allow a malicious user to insert, modify, or delete data maliciously.

Recommendations For SIMATIC Process Historian versions prior to 2014 SP3 Update 6, update to SP3 Update 6 or later. For SIMATIC Process Historian 2019 versions, there is no information about a newer version that contains a fix for this vulnerability. For SIMATIC Process Historian 2020 versions, there is no information about a newer version that contains a fix for this vulnerability.