CVE-2021-31893CWE-120

CVE-2021-31893: falha em Siemens SIMATIC PCS 7 V8.2 and earlier

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC PCS+ Monitorar SIMATIC STEP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.6%
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.
Produtos afetados
Siemens · SIMATIC PCS 7 V8.2 and earlierSiemens · SIMATIC PCS 7 V9.0Siemens · SIMATIC PDMSiemens · SIMATIC STEP 7 V5.XSiemens · SINAMICS STARTER (containing STEP 7 OEM version)
CVEs relacionadas — Siemens SIMATIC PCS 7 V8.2 and earlier

No mesmo produto, das mais perigosas para as menos.

CVE-2018-4832—CVE-2018-4832EPSS 2.4%CVE-2019-19282HIGHCVE-2019-19282EPSS 1.3%CVE-2021-40358CRITICALCVE-2021-40358EPSS 1.3%CVE-2021-40359HIGHCVE-2021-40359EPSS 1.2%CVE-2021-40360—CVE-2021-40360EPSS 0.7%CVE-2020-7585—CVE-2020-7585EPSS 0.5%