Buffer Overflow Vulnerability in Siemens SIMATIC Products
CVE-2021-31893

7.8HIGH

Key Information:

Vendor
Siemens
Status
Simatic Pcs 7 V8.2 And Earlier
Simatic Pcs 7 V9.0
Simatic Pdm
Simatic Step 7 V5.x
Vendor
CVE Published:
13 July 2021

Summary

A buffer overflow vulnerability exists in several Siemens SIMATIC products. This flaw can occur when handling specific files, allowing a local attacker to perform a denial-of-service attack or, in some cases, execute arbitrary code remotely. The vulnerability affects multiple versions of SIMATIC PCS 7, PDM, STEP 7, and SINAMICS STARTER. Prompt action is recommended to mitigate potential security risks associated with this vulnerability.

Affected Version(s)

SIMATIC PCS 7 V8.2 and earlier All versions

SIMATIC PCS 7 V9.0 All versions < V9.0 SP3

SIMATIC PDM All versions < V9.2

References

https://cert-portal.siemens.com/productcert/pdf/ssa-64196...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.