CVE-2021-41057: Siemens Pss Cape

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.

Affected products

• Siemens Pss Cape: version 14 only
• Siemens Pss E: from 34.0.0, before 34.9.1 (fixed in 34.9.1); from 35.0.0, before 35.3.2 (fixed in 35.3.2)
• Siemens Pss Odms: before 12.2.6.1 (fixed in 12.2.6.1)
• Siemens Sicam 230: before 8.0 (fixed in 8.0)
• Siemens SIMATIC Information Server: before 2019 (fixed in 2019); version 2019 only
• Siemens SIMATIC Pcs Neo: any version
• Siemens SIMATIC Process Historian: up to and including 2019
• Siemens SIMATIC Wincc Oa: up to and including 3.18
• Siemens Simit: up to and including 10.0
• Wibu Codemeter Runtime: before 7.30a (fixed in 7.30a)

Published 2021-11-14. Last modified 2026-06-17.