AUGUST 5, 2026
Live Feed
Back to database
Case File

CVE-2021-31894

HIGH · CVSS 8.8 EPSS 0.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-07-13 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. See the original NVD description below for full technical details.

CVE
CVE-2021-31894
Severity
HIGH
CVSS
8.8
EPSS
0.23%

Original NVD Description

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.

Related CVEs

Other vulnerabilities affecting the same vendor(s)