CVE-2021-31894

CVE-2021-31894 is a high-severity vulnerability affecting Siemens SIMATIC PCS 7, SIMATIC PDM, SIMATIC STEP 7, and SINAMICS STARTER software. It stems from write permissions on a directory containing device configuration metafiles. An attacker could exploit this by modifying these metafiles to manipulate device parameters or behavior during subsequent configuration. The CVSS score of 8.8 (High) indicates a local attack vector with low complexity, requiring low privileges, but leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal.