CVE-2021-31892

A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMERIK Analyze MyPerformance /OEE-Monitor (All versions), SINUMERIK Analyze MyPerformance /OEE-Tuning (All versions), SINUMERIK Integrate Client 02 (All versions >= V02.00.12 < 02.00.18), SINUMERIK Integrate Client 03 (All versions >= V03.00.12 < 03.00.18), SINUMERIK Integrate Client 04 (V04.00.02 and all versions >= V04.00.15 < 04.00.18), SINUMERIK Integrate for Production 4.1 (All versions < V4.1 SP10 HF3), SINUMERIK Integrate for Production 5.1 (V5.1), SINUMERIK Manage MyMachines (All versions), SINUMERIK Manage MyMachines /Remote (All versions), SINUMERIK Manage MyMachines /Spindel Monitor (All versions), SINUMERIK Manage MyPrograms (All versions), SINUMERIK Manage MyResources /Programs (All versions), SINUMERIK Manage MyResources /Tools (All versions), SINUMERIK Manage MyTools (All versions), SINUMERIK Operate V4.8 (All versions < V4.8 SP8), SINUMERIK Operate V4.93 (All versions < V4.93 HF7), SINUMERIK Operate V4.94 (All versions < V4.94 HF5), SINUMERIK Optimize MyProgramming /NX-Cam Editor (All versions). Due to an error in a third-party dependency the ssl flags used for setting up a TLS connection to a server are overwitten with wrong settings. This results in a missing validation of the server certificate and thus in a possible TLS MITM szenario.

• CWE-295

• https://cert-portal.siemens.com/productcert/pdf/ssa-729965.pdfVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-04Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-729965.pdfVendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-194-04Third Party Advisory

Published

Jul 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31887A vulnerability has been identified in APOGEE MBC (PPC) (BAC…8.8
• CVE-2021-31888A vulnerability has been identified in APOGEE MBC (PPC) (BAC…8.8
• CVE-2021-31889A vulnerability has been identified in Capital Embedded AR C…9.1
• CVE-2021-3189The slashify package 1.0.0 for Node.js allows open-redirect …6.1
• CVE-2021-31890A vulnerability has been identified in Capital Embedded AR C…9.1
• CVE-2021-31891A vulnerability has been identified in Desigo CC (All versio…10
• CVE-2021-31893A vulnerability has been identified in SIMATIC PCS 7 V8.2 an…7.8
• CVE-2021-31894A vulnerability has been identified in SIMATIC PCS 7 V8.2 an…8.8
• CVE-2021-31895A vulnerability has been identified in RUGGEDCOM i800 (All v…8.1
• CVE-2021-31897In JetBrains WebStorm before 2021.1, code execution without …9.8
• CVE-2021-31898In JetBrains WebStorm before 2021.1, HTTP requests were used…7.5
• CVE-2021-31899In JetBrains Code With Me bundled to the compatible IDEs bef…8.8