CVE-2021-37181

A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC Compact V4.0 (All versions), Desigo CC Compact V4.1 (All versions), Desigo CC Compact V4.2 (All versions), Desigo CC Compact V5.0 (All versions < V5.0 QU1), Desigo CC V4.0 (All versions), Desigo CC V4.1 (All versions), Desigo CC V4.2 (All versions), Desigo CC V5.0 (All versions < V5.0 QU1). The application deserialises untrusted data without sufficient validations, that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system. The CCOM communication component used for Windows App / Click-Once and IE Web / XBAP client connectivity are affected by the vulnerability.

• CWE-502

• https://cert-portal.siemens.com/productcert/pdf/ssa-453715.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-453715.pdfPatch, Vendor Advisory

Published

Sep 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37176A vulnerability has been identified in Simcenter Femap V2020…3.3
• CVE-2021-37177A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2021-37178A vulnerability has been identified in Solid Edge SE2021 (Al…5.5
• CVE-2021-37179A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
• CVE-2021-3718A denial of service vulnerability was reported in some Think…4.6
• CVE-2021-37180A vulnerability has been identified in Solid Edge SE2021 (Al…7.8
• CVE-2021-37182A vulnerability has been identified in SCALANCE XM408-4C (Al…7.5
• CVE-2021-37183A vulnerability has been identified in SINEMA Remote Connect…6.5
• CVE-2021-37184A vulnerability has been identified in Industrial Edge Manag…9.8
• CVE-2021-37185A vulnerability has been identified in SIMATIC Drive Control…7.5
• CVE-2021-37186A vulnerability has been identified in LOGO! CMR2020 (All ve…5.4
• CVE-2021-37187An issue was discovered on Digi TransPort devices through 20…6.5