Read the docs
TI-2021-11880 Aliases CVE-2021-31891GHSA-ch26-285q-m7w2

OS command injection in Siemens Desigo CC

Priority MEDIUM 49CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.

Summary

A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GET request which could lead to command injection. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the system with root privileges.

Why it matters now

EPSS 0.03842 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensDesigo CCAll versions with OIS Extension Module—No fix listedCNA
SiemensGMA-ManagerAll versions with OIS running on Debian 9 or earlier—No fix listedCNA
SiemensOperation SchedulerAll versions with OIS running on Debian 9 or earlier—No fix listedCNA
SiemensSiveillance ControlAll versions with OIS running on Debian 9 or earlier—No fix listedCNA
SiemensSiveillance Control ProAll versions—No fix listedCNA
  • Desigo CC VendorSiemens Affected All versions with OIS Extension Module Fixed in — No fix listed CNA
  • GMA-Manager VendorSiemens Affected All versions with OIS running on Debian 9 or earlier Fixed in — No fix listed CNA
  • Operation Scheduler VendorSiemens Affected All versions with OIS running on Debian 9 or earlier Fixed in — No fix listed CNA
  • Siveillance Control VendorSiemens Affected All versions with OIS running on Debian 9 or earlier Fixed in — No fix listed CNA
  • Siveillance Control Pro VendorSiemens Affected All versions Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:siemens:desigo_cc:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:a:siemens:siveillance_control_pro:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:a:siemens:gma-manager:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:a:siemens:operation_scheduler:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:a:siemens:siveillance_control:*:*:*:*:*:*:*:*all versionsVulnerableSiemens
cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*up to 9.0Running onDebian
  • cpe:2.3:a:siemens:desigo_cc:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:a:siemens:siveillance_control_pro:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:a:siemens:gma-manager:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:a:siemens:operation_scheduler:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:a:siemens:siveillance_control:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
  • cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:* Versions up to 9.0 Running on ·Debian

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-31891
  2. 2026-10-03 Alias added: GHSA-ch26-285q-m7w2
  3. 2026-10-19 EPSS moved to the 90th–95th percentile

References

Patch 1

  • TI-2021-15243 Deserialization of untrusted data in Siemens Cerberus DMS V4.0 CVSS 3.1CRITICAL 10.0
  • TI-2022-14579 Improper authentication in Siemens Cerberus DMS CVSS 3.1CRITICAL 9.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences