CVE-2021-31894

🗓️ 13 Jul 2021 11:02:58Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 57 Views

Vulnerability in SIMATIC PCS 7 V8.2 and earlier, SIMATIC PCS 7 V9.X, SIMATIC PDM, SIMATIC STEP 7 V5.X, SINAMICS STARTE

Reporter	Title	Published	Views	Family All 11
CNNVD	Siemens SIMATIC PCS 7 安全漏洞	13 Jul 202100:00	–	cnnvd
CNVD	Siemens SIMATIC PCS 7 Security Bypass Vulnerability	16 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-31894	13 Jul 202111:02	–	cvelist
EUVD	EUVD-2021-18769	7 Oct 202500:30	–	euvd
ICS	Siemens SIMATIC Software Products (Update B)	13 Jul 202100:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products.	14 Sep 202100:00	–	ncsc
NVD	CVE-2021-31894	13 Jul 202111:15	–	nvd
OSV	CVE-2021-31894	13 Jul 202111:15	–	osv
Prion	Design/Logic Flaw	13 Jul 202111:15	–	prion
Positive Technologies	PT-2021-19569 · Siemens · Sinamics Starter +3	13 Jul 202100:00	–	ptsecurity

NVD

Node

siemens simatic_pcs_7_firmwareRange≤8.2

siemens simatic_pcs_7_firmwareMatch9.0

AND

siemens simatic_pcs_7Match-

Node

siemens simatic_pdm_firmwareMatch-

AND

siemens simatic_pdmMatch-

Node

siemens simatic_step_7_firmwareRange5.0–5.7

AND

siemens simatic_step_7Match-

Node

siemens sinamics_starter_firmwareRange<5.4

siemens sinamics_starter_firmwareMatch5.4-

siemens sinamics_starter_firmwareMatch5.4hf1

siemens sinamics_starter_firmwareMatch5.4hf2

siemens sinamics_starter_firmwareMatch5.4sp1

siemens sinamics_starter_firmwareMatch5.4sp1_hf1

siemens sinamics_starter_firmwareMatch5.4sp2

AND

siemens sinamics_starterMatch-

[
  {
    "product": "SIMATIC PCS 7 V8.2 and earlier",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC PCS 7 V9.X",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V9.1 SP2"
      }
    ]
  },
  {
    "product": "SIMATIC PDM",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V9.2 SP2"
      }
    ]
  },
  {
    "product": "SIMATIC STEP 7 V5.X",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V5.7"
      }
    ]
  },
  {
    "product": "SINAMICS STARTER (containing STEP 7 OEM version)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions <  V5.4 SP2 HF1"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf

21 Nov 2024 06:06Current

8.5High risk

Vulners AI Score8.5

CVSS 27.2

CVSS 3.18.8

EPSS0.00029

CWE-732