CVE-2020-0591

mediumPriorität · verfolgen · 27EPSS 0.003 · 24. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.31% (24th) EPSS

CVSS 4.6 · medium

Is it mine?

17 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)siemens_psirt
Avoid to run untrusted code on affected systems
MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPsiemens_psirt
Avoid to run untrusted code on affected systems
MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)cisa_csaf_ot
Avoid to run untrusted code on affected systems
MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPcisa_csaf_ot
Avoid to run untrusted code on affected systems
Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)siemens_psirt
Currently no remediation is planned
Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPsiemens_psirt
Currently no remediation is planned
Kein Fix geplantSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)cisa_csaf_ot
Currently no remediation is planned
Kein Fix geplantSIMATIC S7-1500 CPU 1518F-4 PN/DP MFPcisa_csaf_ot
Currently no remediation is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.7

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 6.4

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.8 · Auswirkung 5.9

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · CISA US

v3.16.7mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119USCWE-119USCWE-120US

betroffene Produkte (17)

Betroffene Produkte und Versionsbereiche.

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)alle Versionencisa_csaf_otUS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)alle Versionencisa_csaf_otUS
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP≤ vers:all/*cisa_csaf_otUS
n/a Intel(R) Processors≤ See referencesenisa_euvdEU
Intel Corp. 2nd Generation Intel Xeon Scalable Processoralle Versionenfstec_bduRU
Intel Corp. Intel Core X-seriesalle Versionenfstec_bduRU
Intel Corp. Intel Xeon Processor D Familyalle Versionenfstec_bduRU
Intel Corp. Intel Xeon Scalablealle Versionenfstec_bduRU
Intel Corp. Intel Xeon W Processoralle Versionenfstec_bduRU
Intel Corp. Intel Xeon W Processor Familyalle Versionenfstec_bduRU
intel biosalle VersionennvdUScpe:2.3:o:intel:bios:*:*:*:*:*:*:*:*
siemens simatic cpu 1518-4 firmwarealle VersionennvdUScpe:2.3:o:siemens:simatic_cpu_1518-4_firmware:*:*:*:*:*:*:*:*
siemens simatic cpu 1518f-4 firmwarealle VersionennvdUScpe:2.3:o:siemens:simatic_cpu_1518f-4_firmware:*:*:*:*:*:*:*:*
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (MLFB: 6ES7518-4AX00-1AC0, 6AG1518-4AX00-4AC0, incl. SIPLUS variant)≤ vers:all/*siemens_psirtDE
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP≤ vers:all/*siemens_psirtDE
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)≤ vers:all/*siemens_psirtDE

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-501073SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020)2021-05-11csaf · siemens_psirtDE
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744 - “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591. Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-21-131-15Siemens SIMATIC S7-15002021-05-11icsa · cisa_csaf_otUS
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8744 - “BIOS Advisory” Intel-SA-00358 is represented by CVE-2020-0591. Siemens is currently working on BIOS updates that include chipset microcode updates and recommends specific countermeasures for products where updates are not, or not yet available.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd siemens_psirt NVD CVE.org MITRE

veröffentlicht 2020-11-12geändert 2026-06-17

Referenzen (17)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan