Log in Start free

Vulnerability · Published Jul 14, 2020 · Assigned by siemens

CVE-2020-7581

Medium 6.7

In plain English

A medium-severity security flaw in Opcenter Execution Discrete from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)0.4%top 67.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges.

Affected products (as reported)

VendorProductVersions
Siemens Opcenter Execution Discrete All versions < V3.2
Siemens Opcenter Execution Foundation All versions < V3.2
Siemens Opcenter Execution Process All versions < V3.2
Siemens Opcenter Intelligence All versions < V3.3
Siemens Opcenter Quality All versions < V11.3
Siemens Opcenter RD&L V8.0
Siemens SIMATIC Notifier Server for Windows All versions
Siemens SIMATIC PCS neo All versions < V3.0 SP1
Siemens SIMATIC STEP 7 (TIA Portal) V15 All versions < V15.1 Update 5
Siemens SIMATIC STEP 7 (TIA Portal) V16 All versions < V16 Update 2
Siemens SIMOCODE ES V15.1 All versions < V15.1 Update 4
Siemens SIMOCODE ES V16 All versions < V16 Update 1
Siemens Soft Starter ES V15.1 All versions < V15.1 Update 3
Siemens Soft Starter ES V16 All versions < V16 Update 1

Weakness: CWE-428

References