Vulnerability · Published Jul 14, 2020 · Assigned by siemens
CVE-2020-7578
High 8.1
In plain English
A high-severity improper access control in Camstar Enterprise Platform from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)1.1%top 35.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Authenticated users could have access to resources they normally would not have. This vulnerability could allow an attacker to view internal information and perform unauthorized changes.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Camstar Enterprise Platform | All versions |
| Siemens | Opcenter Execution Core | All versions < V8.2 |
Weakness: CWE-284
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf x_refsource_MISC