Vulnerability in Siemens Simatic_pcs_7
CVE-2021-31894
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (contain…
EPSS: 0.002 (13.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Siemens Simatic_pcs_7
- Siemens Simatic_pcs_7_firmware — versions 9.0
- Siemens Simatic Pcs 7 V8.2 And Earlier — versions All versions
- Siemens Simatic Pcs 7 V9.x — versions All versions < V9.1 SP2
- Siemens Simatic Pdm — versions All versions < V9.2 SP2
- Siemens Simatic_pdm
- Siemens Simatic_pdm_firmware
- Siemens Simatic_step_7
- Siemens Simatic_step_7_firmware
- Siemens Simatic Step 7 V5.x — versions All versions < V5.7
Weakness classification (CWE)
References
- productcert@siemens.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-31894?
- CVE-2021-31894 is a high-severity vulnerability in Siemens Simatic_pcs_7, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 8.8/10. Published 2021-07-13.
- How severe is CVE-2021-31894?
- High severity. CVSS v3 base score is 8.8 out of 10.