A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A buffer overflow vulnerability could allow a local attacker to cause a Denial-of-Service situation. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC PCS 7 V8.2 and earlier
Vendor
Siemens
Product
SIMATIC PCS 7 V8.2 and earlier
Platforms
Unknown
Default status
Unknown
SIMATIC PCS 7 V8.2 and earlier · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PCS 7 V9.0
Vendor
Siemens
Product
SIMATIC PCS 7 V9.0
Platforms
Unknown
Default status
Unknown
SIMATIC PCS 7 V9.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V9.0 SP3
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PDM
Vendor
Siemens
Product
SIMATIC PDM
Platforms
Unknown
Default status
Unknown
SIMATIC PDM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V9.2
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC STEP 7 V5.X
Vendor
Siemens
Product
SIMATIC STEP 7 V5.X
Platforms
Unknown
Default status
Unknown
SIMATIC STEP 7 V5.X · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V5.6 SP2 HF3
affected
Unavailable
Unavailable
Unavailable
None listed
SINAMICS STARTER (containing STEP 7 OEM version)
Vendor
Siemens
Product
SINAMICS STARTER (containing STEP 7 OEM version)
Platforms
Unknown
Default status
Unknown
SINAMICS STARTER (containing STEP 7 OEM version) · Scoped product and version facts