CVE-2021-27388: Siemens Sinamics SL150 Firmware

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control commands on the SINAMICS Medium Voltage Products, Remote Access (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

Affected products

• Siemens Sinamics SL150 Firmware: any version
• Siemens Sinamics SM150 Firmware: any version
• Siemens Sinamics SM150I Firmware: any version

Published 2021-06-15. Last modified 2026-06-17.