CVE-2021-31894

CVE-2021-31894 affects Siemens SIMATIC PCS 7 family, PDM, STEP 7, and SINAMICS STARTER with write-permission metafiles. The issue stems from an incorrect permission assignment for a critical resource (metafile directory), allowing an attacker to alter metafile contents and subsequently influence ...

CVE-2021-31893

CVE-2021-31893 affects Siemens SIMATIC PCS 7 family and related tools (PCS 7 v8.2 and earlier; PCS 7 v9.0 prior to SP3; PDM prior to v9.2; STEP 7 v5.X prior to v5.6 SP2 HF3; SINAMICS STARTER prior to v5.4 HF2) and is caused by a buffer overflow when handling certain files. This can allow a local ...