Buffer overflow in Siemens Simatic_pcs
CVE-2021-31893
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (con…
Vulnerability class: Buffer Overflow
EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Siemens Simatic_pcs
- Siemens Simatic Pcs 7 V8.2 And Earlier — versions All versions
- Siemens Simatic Pcs 7 V9.0 — versions All versions < V9.0 SP3
- Siemens Simatic_pcs_firmware — versions 9.0
- Siemens Simatic Pdm — versions All versions < V9.2
- Siemens Simatic_pdm
- Siemens Simatic_pdm_firmware
- Siemens Simatic_step_7
- Siemens Simatic_step_7_firmware
- Siemens Simatic Step 7 V5.x — versions All versions < V5.6 SP2 HF3
Weakness classification (CWE)
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-31893?
- CVE-2021-31893 is a high-severity vulnerability in Siemens Simatic_pcs, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2021-07-13.
- How severe is CVE-2021-31893?
- High severity. CVSS v3 base score is 7.8 out of 10.