CVE-2020-7587: High severity siemens opcenter execution discrete vulnerability
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-7587.
Which software versions are affected by this vulnerability?
Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), Siemens Simatic It Lms (All versions < V2.6), Siemens Simatic It Production Suite (All versions < V8.0), Siemens Simatic Notifier Server (Windows only), Siemens Simatic Pcs Neo (All versions < V3.0), Siemens SIMATIC STEP 7 (All versions between 15 and 15.1, exactly V15.1, V16, V16-update1), Siemens Simocode Es (All versions < V15.1, exactly V15.1, V16), Siemens Soft Starter Es (All versions < V15.1, exactly V15.1).
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is 8.2 (High).
What is the Common Weakness Enumeration (CWE) ID associated with this vulnerability?
The Common Weakness Enumeration (CWE) ID associated with this vulnerability is CWE-400.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following link: [Siemens Security Advisory](https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf).