CVE-2020-7581

highPriorität · verfolgen · 27EPSS 0.004 · 32. PerzentilDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.38% (32nd) EPSS
CVSS 7.2 · high
Is it mine?
83 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenOpcenter Execution Discretesiemens_psirt

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Execution Foundationsiemens_psirt

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Execution Processsiemens_psirt

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Intelligencesiemens_psirt

    Update to V3.3 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Qualitysiemens_psirt

    Update to V11.3 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter RD&Lsiemens_psirt

    Update to V8.1 or later version

    https://support.sw.siemens.com/
  • BehobenSIMATIC PCS neosiemens_psirt

    Update to V3.0 SP1 or later version

  • BehobenSIMATIC STEP 7 (TIA Portal) V15siemens_psirt

    Update to V15.1 Update 5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890/
  • BehobenSIMATIC STEP 7 (TIA Portal) V16siemens_psirt

    Update to V16 Update 2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • BehobenSIMOCODE ES V15.1siemens_psirt

    Update to V15 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768994/
  • BehobenSIMOCODE ES V16siemens_psirt

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109781888/
  • BehobenSoft Starter ES V15.1siemens_psirt

    Update to V15 Update 3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769017/
  • BehobenSoft Starter ES V16siemens_psirt

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109771657/
  • BehobenOpcenter Execution Discretecisa_csaf_ot

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Execution Foundationcisa_csaf_ot

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Execution Processcisa_csaf_ot

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Intelligencecisa_csaf_ot

    Update to V3.3 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter Qualitycisa_csaf_ot

    Update to V11.3 or later version

    https://support.sw.siemens.com/
  • BehobenOpcenter RD&Lcisa_csaf_ot

    Update to V8.1 or later version

    https://support.sw.siemens.com/
  • BehobenSIMATIC PCS neocisa_csaf_ot

    Update to V3.0 SP1 or later version. To obtain SIMATIC PCS neo contact your local support.

  • BehobenSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot

    Update to V15.1 Update 5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890/
  • BehobenSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot

    Update to V16 Update 2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • BehobenSIMOCODE ES V15.1cisa_csaf_ot

    Update to V15 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768994/
  • BehobenSIMOCODE ES V16cisa_csaf_ot

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109781888/
  • BehobenSoft Starter ES V15.1cisa_csaf_ot

    Update to V15 Update 3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769017/
  • BehobenSoft Starter ES V16cisa_csaf_ot

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109771657/
  • MitigationOpcenter Execution Discretesiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Foundationsiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Processsiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Intelligencesiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Qualitysiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter RD&Lsiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC Notifier Server for Windowssiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC PCS neosiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V15siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V16siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V15.1siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V16siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V15.1siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V16siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Discretecisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Foundationcisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Processcisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Intelligencecisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Qualitycisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter RD&Lcisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC Notifier Server for Windowscisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC PCS neocisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V15.1cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V16cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V15.1cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V16cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • Kein Fix geplantSIMATIC Notifier Server for Windowssiemens_psirt

    Currently no fix is planned

  • Kein Fix geplantSIMATIC Notifier Server for Windowscisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.2
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.1–7.2

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.8 · Auswirkung 5.9
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.16.7mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-428USCWE-428USCWE-428USCWE-428US
04

betroffene Produkte (83)

Betroffene Produkte und Versionsbereiche.

20 von 83 angezeigt
05

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • SSA-841348SSA-841348: Multiple Vulnerabilities in the UMC Component2020-07-14csaf · siemens_psirtDE

    The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

  • ICSA-20-196-05Siemens UMC Stack (Update H)2020-07-14icsa · cisa_csaf_otUS

    The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

06

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
veröffentlicht 2020-07-14geändert 2026-06-17
08

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan