CVE-2020-7587
First published: Tue Jul 14 2020(Updated: )
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Opcenter Execution Discrete | <3.2 | |
| Siemens Opcenter Execution Foundation | <3.2 | |
| Siemens Opcenter Execution Process | <3.2 | |
| Siemens Opcenter Intelligence | <3.3 | |
| Siemens Opcenter Quality | <11.3 | |
| Siemens Opcenter Rd\&l | =8.0 | |
| Siemens Simatic It Lms | <2.6 | |
| Siemens Simatic It Production Suite | <8.0 | |
| Siemens Simatic Notifier Server | ||
| Siemens Simatic Pcs Neo | <3.0 | |
| Siemens Simatic Pcs Neo | =3.0 | |
| Siemens SIMATIC STEP 7 | >=15<15.1 | |
| Siemens SIMATIC STEP 7 | =15.1 | |
| Siemens SIMATIC STEP 7 | =16 | |
| Siemens SIMATIC STEP 7 | =16-update1 | |
| Siemens Simocode Es | <15.1 | |
| Siemens Simocode Es | =15.1 | |
| Siemens Simocode Es | =16 | |
| Siemens Soft Starter Es | <15.1 | |
| Siemens Soft Starter Es | =15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-7587.
Which software versions are affected by this vulnerability?
Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), Siemens Simatic It Lms (All versions < V2.6), Siemens Simatic It Production Suite (All versions < V8.0), Siemens Simatic Notifier Server (Windows only), Siemens Simatic Pcs Neo (All versions < V3.0), Siemens SIMATIC STEP 7 (All versions between 15 and 15.1, exactly V15.1, V16, V16-update1), Siemens Simocode Es (All versions < V15.1, exactly V15.1, V16), Siemens Soft Starter Es (All versions < V15.1, exactly V15.1).
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is 8.2 (High).
What is the Common Weakness Enumeration (CWE) ID associated with this vulnerability?
The Common Weakness Enumeration (CWE) ID associated with this vulnerability is CWE-400.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following link: [Siemens Security Advisory](https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf).
- collector/nvd-index
- vendor/siemens
- canonical/siemens opcenter execution discrete
- canonical/siemens opcenter execution foundation
- canonical/siemens opcenter execution process
- canonical/siemens opcenter intelligence
- canonical/siemens opcenter quality
- canonical/siemens opcenter rd\&l
- version/siemens opcenter rd\&l/8.0
- canonical/siemens simatic it lms
- canonical/siemens simatic it production suite
- canonical/siemens simatic notifier server
- canonical/siemens simatic pcs neo
- version/siemens simatic pcs neo/3.0
- canonical/siemens simatic step 7
- version/siemens simatic step 7/15
- version/siemens simatic step 7/15.1
- version/siemens simatic step 7/16
- version/siemens simatic step 7/16-update1
- canonical/siemens simocode es
- version/siemens simocode es/15.1
- version/siemens simocode es/16
- canonical/siemens soft starter es
- version/siemens soft starter es/15.1