{"schemaVersion":3,"id":"CVE-2021-31894","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.","dates":{"published":"2021-07-13T11:02:58.000Z","modified":"2024-08-03T23:10:30.952Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00228,"percentile":0.12702,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00228},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00228,"percentile":0.12702}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00228,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00228,"percentile":0.12702}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-732","name":"Incorrect Permission Assignment for Critical Resource","description":"The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/732.html"}],"affected":[{"vendor":"siemens","product":"simatic_pcs_7","name":"simatic pcs 7","label":"simatic_pcs_7","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 8.2","noFixRecorded":false,"fixedIn":null},{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 8.2 | 9.0","eol":null,"hubHref":"/vendor/siemens/simatic_pcs_7"},{"vendor":"siemens","product":"simatic pcs 7 v8.2 and earlier","name":"SIMATIC PCS 7 V8.2 and earlier","label":"simatic pcs 7 v8.2 and earlier","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":"/vendor/siemens/simatic_pcs_7_v82_and_earlier"},{"vendor":"siemens","product":"simatic pcs 7 v9.x","name":"SIMATIC PCS 7 V9.X","label":"simatic pcs 7 v9.x","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V9.1 SP2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V9.1 SP2","eol":null,"hubHref":"/vendor/siemens/simatic_pcs_7_v9x"},{"vendor":"siemens","product":"simatic_pdm_firmware","name":"simatic pdm firmware","label":"simatic_pdm_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"All versions < V9.2 SP2","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V9.2 SP2 | na","eol":null,"hubHref":"/vendor/siemens/simatic_pdm"},{"vendor":"siemens","product":"simatic_step_7","name":"simatic step 7","label":"simatic_step_7","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 5.0, < 5.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 5.0, < 5.7","eol":null,"hubHref":"/vendor/siemens/simatic_step_7"},{"vendor":"siemens","product":"simatic step 7 v5.x","name":"SIMATIC STEP 7 V5.X","label":"simatic step 7 v5.x","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions < V5.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions < V5.7","eol":null,"hubHref":"/vendor/siemens/simatic_step_7_v5x"},{"vendor":"siemens","product":"sinamics_starter_firmware","name":"sinamics starter firmware","label":"sinamics_starter_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.4","noFixRecorded":false,"fixedIn":null},{"text":"5.4","noFixRecorded":false,"fixedIn":null},{"text":"5.4:hf1","noFixRecorded":false,"fixedIn":null},{"text":"5.4:hf2","noFixRecorded":false,"fixedIn":null},{"text":"5.4:sp1","noFixRecorded":false,"fixedIn":null},{"text":"5.4:sp1_hf1","noFixRecorded":false,"fixedIn":null},{"text":"5.4:sp2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.4 | 5.4 | 5.4:hf1 | 5.4:hf2 | 5.4:sp1 | 5.4:sp1_hf1 | 5.4:sp2","eol":null,"hubHref":"/vendor/siemens/sinamics_starter"},{"vendor":"siemens","product":"sinamics starter (containing step 7 oem version)","name":"SINAMICS STARTER (containing STEP 7 OEM version)","label":"sinamics starter (containing step 7 oem version)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions <  V5.4 SP2 HF1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions <  V5.4 SP2 HF1","eol":null,"hubHref":"/vendor/siemens/sinamics_starter_containing_step_7_oem_version"}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf","hostname":"cert-portal.siemens.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-07-13T11:02:58.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T23:10:30.952Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T17:07:43.971Z","stale":false,"partial":false}}