CVE-2021-41543

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-08 · updated 2026-06-17
Weakness: CWE-284

Description

A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.

Affected products

Siemens Climatix Pol909 Firmware: before 11.36; before 11.44 — fixed in 11.36, 11.44

How to fix

Upgrade to a fixed version: Siemens Climatix Pol909 Firmware 11.36, 11.44. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf

Get alerted when CVE-2021-41543 or the next vulnerability affects your stack