CVE-2021-31894
highPriorität · verfolgen · 35EPSS 0.002 · 13. PerzentilDEEUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSIMATIC PCS 7 V9.Xsiemens_psirt
Update to V9.1 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812240/ - BehobenSIMATIC PDMsiemens_psirt
Update to V9.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811911/ - BehobenSIMATIC STEP 7 V5.Xsiemens_psirt
Update to V5.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794088/ - BehobenSINAMICS STARTER (containing STEP 7 OEM version)siemens_psirt
Update to V5.4 SP2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800526/ - BehobenSIMATIC PCS 7 V9.Xcisa_csaf_ot
Update to V9.1 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812240/ - BehobenSIMATIC PDMcisa_csaf_ot
Update to V9.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811911/ - BehobenSIMATIC STEP 7 V5.Xcisa_csaf_ot
Update to V5.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794088/ - BehobenSINAMICS STARTER (containing STEP 7 OEM version)cisa_csaf_ot
Update to V5.4 SP2 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800526/ - MitigationSIMATIC PCS 7 V8.2 and earliersiemens_psirt
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PCS 7 V9.Xsiemens_psirt
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PDMsiemens_psirt
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC STEP 7 V5.Xsiemens_psirt
Restrict access on the engineering station to trusted users only
- MitigationSINAMICS STARTER (containing STEP 7 OEM version)siemens_psirt
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PCS 7 V8.2 and earliercisa_csaf_ot
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PCS 7 V9.Xcisa_csaf_ot
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC PDMcisa_csaf_ot
Restrict access on the engineering station to trusted users only
- MitigationSIMATIC STEP 7 V5.Xcisa_csaf_ot
Restrict access on the engineering station to trusted users only
- MitigationSINAMICS STARTER (containing STEP 7 OEM version)cisa_csaf_ot
Restrict access on the engineering station to trusted users only
- Kein Fix geplantSIMATIC PCS 7 V8.2 and earliersiemens_psirt
Currently no fix is planned
- Kein Fix geplantSIMATIC PCS 7 V8.2 and earliercisa_csaf_ot
Currently no fix is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (26)
Betroffene Produkte und Versionsbereiche.
- siemens simatic pdm firmwarealle VersionennvdUScpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:*
- siemens simatic step 7 firmware5.0 → 5.7nvdUScpe:2.3:o:siemens:simatic_step_7_firmware:*:*:*:*:*:*:*:*
- siemens sinamics starter firmware< 5.4nvdUScpe:2.3:o:siemens:sinamics_starter_firmware:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-661034SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products2021-07-13csaf · siemens_psirtDE
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
- ICSA-21-194-06Siemens SIMATIC Software Products (Update B)2021-07-13icsa · cisa_csaf_otUS
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (7)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdfcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-31894cnnvd
- https://vigilance.fr/vulnerability/Siemens-SIMATIC-privilege-escalation-via-metafiles-35868cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.2399cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021071421cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdfPatchVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan