CVE-2021-31893

7.8HIGH

Key Information:

Vendor
Siemens
Status
Simatic Pcs 7 V8.2 And Earlier
Simatic Pcs 7 V9.0
Simatic Pdm
Simatic Step 7 V5.x
Vendor
CVE Published:
13 July 2021

Summary

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.

Affected Version(s)

SIMATIC PCS 7 V8.2 and earlier All versions

SIMATIC PCS 7 V9.0 All versions < V9.0 SP3

SIMATIC PDM All versions < V9.2

References

https://cert-portal.siemens.com/productcert/pdf/ssa-64196...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.