Incorrect permission assignment in Siemens SIMATIC PCS 7 V8.2 and earlier
Priority LOW 37CWE-732Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.
Why it matters now
EPSS 0.00228 13th percentileScored 2026-11-07
Fix Fixed SIMATIC STEP 7 V5.X (Siemens): V5.7
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC PCS 7 V8.2 and earlier | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC PCS 7 V9.X | All versions < V9.1 SP2 | — | No fix listed | CNA |
| Siemens | SIMATIC PDM | All versions < V9.2 SP2 | — | No fix listed | CNA |
| Siemens | SIMATIC STEP 7 V5.X | before V5.7 | V5.7 | Patch available | CNA |
| Siemens | SINAMICS STARTER (containing STEP 7 OEM version) | All versions < V5.4 SP2 HF1 | — | No fix listed | CNA |
- SIMATIC PCS 7 V8.2 and earlier VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC PCS 7 V9.X VendorSiemens Affected All versions < V9.1 SP2 Fixed in — No fix listed CNA
- SIMATIC PDM VendorSiemens Affected All versions < V9.2 SP2 Fixed in — No fix listed CNA
- SIMATIC STEP 7 V5.X VendorSiemens Affected before V5.7 Fixed in V5.7 Patch available CNA
- SINAMICS STARTER (containing STEP 7 OEM version) VendorSiemens Affected All versions < V5.4 SP2 HF1 Fixed in — No fix listed CNA
CPE configurations NVD · 15
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_pcs_7_firmware:*:*:*:*:*:*:*:* | up to 8.2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_pcs_7_firmware:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pcs_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_pdm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_step_7_firmware:*:*:*:*:*:*:*:* | 5.0 to before 5.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_step_7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:*:*:*:*:*:*:*:* | before 5.4 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:-:*:*:*:*:*:* | 5.4 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hf1:*:*:*:*:*:* | 5.4 hf1 | Vulnerable | Siemens |
- cpe:2.3:o:siemens:simatic_pcs_7_firmware:*:*:*:*:*:*:*:* Versions up to 8.2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_pcs_7_firmware:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pcs_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_pdm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_step_7_firmware:*:*:*:*:*:*:*:* Versions 5.0 to before 5.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_step_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:*:*:*:*:*:*:*:* Versions before 5.4 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:-:*:*:*:*:*:* Versions 5.4 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hf1:*:*:*:*:*:* Versions 5.4 hf1 Vulnerable ·Siemens
Show 5 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hf2:*:*:*:*:*:* | 5.4 hf2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:sp1:*:*:*:*:*:* | 5.4 sp1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:sp1_hf1:*:*:*:*:*:* | 5.4 sp1_hf1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:sp2:*:*:*:*:*:* | 5.4 sp2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_starter:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:hf2:*:*:*:*:*:* Versions 5.4 hf2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:sp1:*:*:*:*:*:* Versions 5.4 sp1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:sp1_hf1:*:*:*:*:*:* Versions 5.4 sp1_hf1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_starter_firmware:5.4:sp2:*:*:*:*:*:* Versions 5.4 sp2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_starter:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC STEP 7 V5.X (Siemens) Fixed in V5.7
Timeline
- 2026-10-02 Threatist record created from CVE-2021-31894
- 2026-10-03 Alias added: GHSA-rq6h-r956-9p9r
References
Sources
- CVE-2021-31894 · CVE Program
- CVE-2021-31894 · NVD
- FIRST EPSS
- GHSA-rq6h-r956-9p9r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences