Buffer overflow in Siemens SIMATIC PCS 7 V8.2 and earlier
Priority LOW 35CWE-120Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.
Summary
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.
Why it matters now
EPSS 0.00563 47th percentileScored 2026-11-07
Fix Fixed SIMATIC PDM (Siemens): V9.2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC PCS 7 V8.2 and earlier | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC PCS 7 V9.0 | All versions < V9.0 SP3 | — | No fix listed | CNA |
| Siemens | SIMATIC PDM | before V9.2 | V9.2 | Patch available | CNA |
| Siemens | SIMATIC STEP 7 V5.X | All versions < V5.6 SP2 HF3 | — | No fix listed | CNA |
| Siemens | SINAMICS STARTER (containing STEP 7 OEM version) | All versions < V5.4 HF2 | — | No fix listed | CNA |
- SIMATIC PCS 7 V8.2 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC PCS 7 V9.0 VendorSiemens Affected All versions < V9.0 SP3 Fixed in — No fix listed CNA
- SIMATIC PDM VendorSiemens Affected before V9.2 Fixed in V9.2 Patch available CNA
- SIMATIC STEP 7 V5.X VendorSiemens Affected All versions < V5.6 SP2 HF3 Fixed in — No fix listed CNA
- SINAMICS STARTER (containing STEP 7 OEM version) VendorSiemens Affected All versions < V5.4 HF2 Fixed in — No fix listed CNA
CPE configurations NVD · 14
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_pcs_firmware:*:*:*:*:*:*:*:* | up to 8.2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_firmware:9.0:-:*:*:*:*:*:* | 9.0 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_firmware:9.0:sp1:*:*:*:*:*:* | 9.0 sp1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_firmware:9.0:sp2:*:*:*:*:*:* | 9.0 sp2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:* | before 9.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_step_7_firmware:*:*:*:*:*:*:*:* | up to 5.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_step_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:*:*:*:*:*:*:*:* | before 5.4 | Vulnerable | Siemens |
- cpe:2.3:o:siemens:simatic_pcs_firmware:*:*:*:*:*:*:*:* Versions up to 8.2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_firmware:9.0:-:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_firmware:9.0:sp1:*:*:*:*:*:* Versions 9.0 sp1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_firmware:9.0:sp2:*:*:*:*:*:* Versions 9.0 sp2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:* Versions before 9.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_step_7_firmware:*:*:*:*:*:*:*:* Versions up to 5.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_step_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:*:*:*:*:*:*:*:* Versions before 5.4 Vulnerable ·Siemens
Show 4 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:-:*:*:*:*:*:* | 5.4 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hotfix_1:*:*:*:*:*:* | 5.4 hotfix_1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hotfix_2:*:*:*:*:*:* | 5.4 hotfix_2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_starter:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:-:*:*:*:*:*:* Versions 5.4 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hotfix_1:*:*:*:*:*:* Versions 5.4 hotfix_1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hotfix_2:*:*:*:*:*:* Versions 5.4 hotfix_2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_starter:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC PDM (Siemens) Fixed in V9.2
Timeline
- 2026-10-02 Threatist record created from CVE-2021-31893
- 2026-10-03 Alias added: GHSA-47m5-c425-v4ww
References
More Siemens Simatic Pcs Firmware vulnerabilities
- TI-2022-12830 Cross-site request forgery in Siemens SIMATIC Drive Controller CPU 1504D TF CVSS 3.1MEDIUM 6.5
Sources
- CVE-2021-31893 · CVE Program
- CVE-2021-31893 · NVD
- FIRST EPSS
- GHSA-47m5-c425-v4ww · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences