CVE-2021-44165: Siemens 7kg9501-0aa01-0aa1 Firmware

High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days.

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41), POWER METER SICAM Q100 (All versions < V2.41). The affected firmware contains a buffer overflow vulnerability in the web application that could allow a remote attacker with engineer or admin priviliges to potentially perform remote code execution.

Affected products

• Siemens 7kg9501-0aa01-0aa1 Firmware: before 2.41 (fixed in 2.41)
• Siemens 7kg9501-0aa01-2aa1 Firmware: before 2.41 (fixed in 2.41)
• Siemens 7kg9501-0aa31-0aa1 Firmware: before 2.41 (fixed in 2.41)
• Siemens 7kg9501-0aa31-2aa1 Firmware: before 2.41 (fixed in 2.41)

Published 2021-12-14. Last modified 2026-06-17.