CVE-2020-7587

mediumPriorität · verfolgen · 34EPSS 0.025 · 85. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.48% (85th) EPSS

CVSS 6.4 · medium

Is it mine?

98 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenOpcenter Execution Discretesiemens_psirt
Update to V3.2 or later version
https://support.sw.siemens.com/
BehobenOpcenter Execution Foundationsiemens_psirt
Update to V3.2 or later version
https://support.sw.siemens.com/
BehobenOpcenter Execution Processsiemens_psirt
Update to V3.2 or later version
https://support.sw.siemens.com/
BehobenOpcenter Intelligencesiemens_psirt
Update to V3.3 or later version
https://support.sw.siemens.com/
BehobenOpcenter Qualitysiemens_psirt
Update to V11.3 or later version
https://support.sw.siemens.com/
BehobenOpcenter RD&Lsiemens_psirt
Update to V8.1 or later version
https://support.sw.siemens.com/
BehobenSIMATIC IT LMSsiemens_psirt
Update to V2.6 or later version
https://support.sw.siemens.com/
BehobenSIMATIC IT Production Suitesiemens_psirt
Update to V8.0 or later version
https://support.sw.siemens.com/
BehobenSIMATIC PCS neosiemens_psirt
Update to V3.0 SP1 or later version
BehobenSIMATIC STEP 7 (TIA Portal) V15siemens_psirt
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
BehobenSIMATIC STEP 7 (TIA Portal) V16siemens_psirt
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
BehobenSIMOCODE ES V15.1siemens_psirt
Update to V15 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768994/
BehobenSIMOCODE ES V16siemens_psirt
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781888/
BehobenSoft Starter ES V15.1siemens_psirt
Update to V15 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109769017/
BehobenSoft Starter ES V16siemens_psirt
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109771657/
BehobenOpcenter Execution Discretecisa_csaf_ot
Update to V3.2 or later version
https://support.sw.siemens.com/
BehobenOpcenter Execution Foundationcisa_csaf_ot
Update to V3.2 or later version
https://support.sw.siemens.com/
BehobenOpcenter Execution Processcisa_csaf_ot
Update to V3.2 or later version
https://support.sw.siemens.com/
BehobenOpcenter Intelligencecisa_csaf_ot
Update to V3.3 or later version
https://support.sw.siemens.com/
BehobenOpcenter Qualitycisa_csaf_ot
Update to V11.3 or later version
https://support.sw.siemens.com/
BehobenOpcenter RD&Lcisa_csaf_ot
Update to V8.1 or later version
https://support.sw.siemens.com/
BehobenSIMATIC IT LMScisa_csaf_ot
Update to V2.6 or later version
https://support.sw.siemens.com/
BehobenSIMATIC IT Production Suitecisa_csaf_ot
Update to V8.0 or later version
https://support.sw.siemens.com/
BehobenSIMATIC PCS neocisa_csaf_ot
Update to V3.0 SP1 or later version. To obtain SIMATIC PCS neo contact your local support.
BehobenSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
BehobenSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
BehobenSIMOCODE ES V15.1cisa_csaf_ot
Update to V15 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768994/
BehobenSIMOCODE ES V16cisa_csaf_ot
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781888/
BehobenSoft Starter ES V15.1cisa_csaf_ot
Update to V15 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109769017/
BehobenSoft Starter ES V16cisa_csaf_ot
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109771657/
MitigationOpcenter Execution Discretesiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Execution Foundationsiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Execution Processsiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Intelligencesiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Qualitysiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter RD&Lsiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC IT LMSsiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC IT Production Suitesiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC Notifier Server for Windowssiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC PCS neosiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V15siemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V16siemens_psirt
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V15.1siemens_psirt
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V16siemens_psirt
Have the software running on systems within trusted networks
MitigationSoft Starter ES V15.1siemens_psirt
Have the software running on systems within trusted networks
MitigationSoft Starter ES V16siemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Execution Discretecisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Execution Foundationcisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Execution Processcisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Intelligencecisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Qualitycisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter RD&Lcisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC IT LMScisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC IT Production Suitecisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC Notifier Server for Windowscisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC PCS neocisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V15.1cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V16cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSoft Starter ES V15.1cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSoft Starter ES V16cisa_csaf_ot
Have the software running on systems within trusted networks
Kein Fix geplantSIMATIC Notifier Server for Windowssiemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC Notifier Server for Windowscisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.2

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.4–8.2

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 4.9

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Lprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 4.2

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:Csecondary · CISA US

v3.16.5mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-400USCWE-400USCWE-400USCWE-400US

betroffene Produkte (98)

Betroffene Produkte und Versionsbereiche.

Opcenter Execution Discretealle Versionencisa_csaf_otUS
Opcenter Execution Foundationalle Versionencisa_csaf_otUS
Opcenter Execution Processalle Versionencisa_csaf_otUS
Opcenter Intelligencealle Versionencisa_csaf_otUS
Opcenter Qualityalle Versionencisa_csaf_otUS
Opcenter RD&Lalle Versionencisa_csaf_otUS
SIMATIC IT LMSalle Versionencisa_csaf_otUS
SIMATIC IT Production Suitealle Versionencisa_csaf_otUS
SIMATIC Notifier Server for Windowsalle Versionencisa_csaf_otUS
SIMATIC PCS neoalle Versionencisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V15alle Versionencisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V16alle Versionencisa_csaf_otUS
SIMOCODE ES V15.1alle Versionencisa_csaf_otUS
SIMOCODE ES V16alle Versionencisa_csaf_otUS
Soft Starter ES V15.1alle Versionencisa_csaf_otUS
Soft Starter ES V16alle Versionencisa_csaf_otUS
Siemens Opcenter Execution Discrete< V3.2cisa_csaf_otUS
Siemens Opcenter Execution Foundation< V3.2cisa_csaf_otUS
Siemens Opcenter Execution Process< V3.2cisa_csaf_otUS
Siemens Opcenter Intelligence< V3.3cisa_csaf_otUS

20 von 98 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-841348SSA-841348: Multiple Vulnerabilities in the UMC Component2020-07-14csaf · siemens_psirtDE
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-20-196-05Siemens UMC Stack (Update H)2020-07-14icsa · cisa_csaf_otUS
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2020-07-14geändert 2026-06-17

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan