CVE-2021-31893

🗓️ 13 Jul 2021 11:02:56Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 46 Views

Vulnerability in SIMATIC PCS 7 & STEP 7, buffer overflow allows DoS and remote code exe

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-31893	13 Jul 202114:25	–	circl
CNNVD	Siemens SIMATIC PCS 7 安全漏洞	13 Jul 202100:00	–	cnnvd
CNVD	Remote Code Execution Vulnerability in Multiple SIMATIC Software Products	16 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-31893	13 Jul 202111:02	–	cvelist
EUVD	EUVD-2021-18768	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC Software Products	13 Jul 202100:00	–	ics
NVD	CVE-2021-31893	13 Jul 202111:15	–	nvd
OSV	CVE-2021-31893	13 Jul 202111:15	–	osv
Prion	Buffer overflow	13 Jul 202111:15	–	prion
RedhatCVE	CVE-2021-31893	9 Jan 202611:24	–	redhatcve

NVD

Node

siemens simatic_pcs_firmwareRange≤8.2

siemens simatic_pcs_firmwareMatch9.0-

siemens simatic_pcs_firmwareMatch9.0sp1

siemens simatic_pcs_firmwareMatch9.0sp2

AND

siemens simatic_pcsMatch-

Node

siemens simatic_pdm_firmwareRange<9.2

AND

siemens simatic_pdmMatch-

Node

siemens simatic_step_7_firmwareRange≤5.6

AND

siemens simatic_step_7Match-

Node

siemens sinamics_starter_firmwareRange<5.4

siemens sinamics_starter_firmwareMatch5.4-

siemens sinamics_starter_firmwareMatch5.4hotfix_1

siemens sinamics_starter_firmwareMatch5.4hotfix_2

AND

siemens sinamics_starterMatch-

[
  {
    "product": "SIMATIC PCS 7 V8.2 and earlier",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC PCS 7 V9.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V9.0 SP3"
      }
    ]
  },
  {
    "product": "SIMATIC PDM",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V9.2"
      }
    ]
  },
  {
    "product": "SIMATIC STEP 7 V5.X",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.6 SP2 HF3"
      }
    ]
  },
  {
    "product": "SINAMICS STARTER (containing STEP 7 OEM version)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.4 HF2"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-641963.pdf

21 Nov 2024 06:06Current

8High risk

Vulners AI Score8

CVSS 27.2

CVSS 3.17.8

EPSS0.00162

CWE-120