A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC PCS 7 V8.2 and earlier
Vendor
Siemens
Product
SIMATIC PCS 7 V8.2 and earlier
Platforms
Unknown
Default status
Unknown
SIMATIC PCS 7 V8.2 and earlier · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PCS 7 V9.X
Vendor
Siemens
Product
SIMATIC PCS 7 V9.X
Platforms
Unknown
Default status
Unknown
SIMATIC PCS 7 V9.X · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V9.1 SP2
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC PDM
Vendor
Siemens
Product
SIMATIC PDM
Platforms
Unknown
Default status
Unknown
SIMATIC PDM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V9.2 SP2
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC STEP 7 V5.X
Vendor
Siemens
Product
SIMATIC STEP 7 V5.X
Platforms
Unknown
Default status
Unknown
SIMATIC STEP 7 V5.X · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V5.7
affected
Unavailable
Unavailable
Unavailable
None listed
SINAMICS STARTER (containing STEP 7 OEM version)
Vendor
Siemens
Product
SINAMICS STARTER (containing STEP 7 OEM version)
Platforms
Unknown
Default status
Unknown
SINAMICS STARTER (containing STEP 7 OEM version) · Scoped product and version facts