CVE-2021-31893: siemens simatic_pcs_firmware Classic Buffer Overflow

Vulnerability summary

CVE-2021-31893 is a high (CVSS 7.8) Classic Buffer Overflow vulnerability in siemens simatic_pcs_firmware. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 45.6% of scored vulnerabilities.

Timeline

1. 13-07-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.

• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.