CVE-2020-7580

highpriority · track · 27EPSS 0.005 · 40 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.46% (40th) EPSS

CVSS 7.2 · high

Is it mine?

154 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-26

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMATIC STEP 7 V5 (All versions < V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions < V3.16 P018), SIMATIC WinCC OA V3.17 (All versions < V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 3), SINAMICS STARTER (All Versions < V5.4 HF2), SINAMICS Startdrive (All Versions < V16 Update 3), SINEC NMS (All versions < V1.0 SP2), SINEMA Server (All versions < V14 SP3), SINUMERIK ONE virtual (All Versions < V6.14), SINUMERIK Operate (All Versions < V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC Automation Toolsiemens_psirt
Update to V4 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/98161300/
FixedSIMATIC NET PC Software V14siemens_psirt
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
FixedSIMATIC NET PC Software V16siemens_psirt
Update to V16 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780209/
FixedSIMATIC PCS neosiemens_psirt
Update to V3.0 SP1 or later version To obtain SIMATIC PCS neo V3.0 SP1 contact your local support.
FixedSIMATIC ProSavesiemens_psirt
Update to V17 or later version <https://support.industry.siemens.com/cs/ww/en/view/10347815/> Note: Some versions of SIMATIC ProSave are not available as separate download (e.g. V17). In this case, use the version of SIMATIC ProSave as bundled with the corresponding version of SIMATIC WinCC (TIA Portal).
FixedSIMATIC S7-1500 Software Controllersiemens_psirt
Update to V21.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/
FixedSIMATIC STEP 7 (TIA Portal) V13siemens_psirt
Update to V13 SP2 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753/
FixedSIMATIC STEP 7 (TIA Portal) V14siemens_psirt
Update to V14 SP1 Update 10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747387
FixedSIMATIC STEP 7 (TIA Portal) V15siemens_psirt
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
FixedSIMATIC STEP 7 (TIA Portal) V16siemens_psirt
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
FixedSIMATIC STEP 7 V5siemens_psirt
Update to V5.6 SP2 HF3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109779992/
FixedSIMATIC WinCC OA V3.16siemens_psirt
Update to V3.16 P018 or later version
https://www.winccoa.com/downloads/category/versions-patches.html
FixedSIMATIC WinCC OA V3.17siemens_psirt
Update to V3.17 P003 or later version
https://www.winccoa.com/downloads/category/versions-patches.html
FixedSIMATIC WinCC Runtime Advancedsiemens_psirt
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/
FixedSIMATIC WinCC Runtime Professional V13siemens_psirt
Update to V13 SP2 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759782/
FixedSIMATIC WinCC Runtime Professional V14siemens_psirt
Update to V14 SP1 Update 10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394/
FixedSIMATIC WinCC Runtime Professional V15siemens_psirt
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763892/
FixedSIMATIC WinCC Runtime Professional V16siemens_psirt
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/
FixedSIMATIC WinCC V7.4siemens_psirt
Update to V7.4 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109779373/
FixedSIMATIC WinCC V7.5siemens_psirt
Update to V7.5 SP1 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773812/
FixedSINAMICS STARTERsiemens_psirt
Update to V5.4 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782792/
FixedSINAMICS Startdrivesiemens_psirt
Update to V16 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781202/
FixedSINEC NMSsiemens_psirt
Update to version V1.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797645/
FixedSINEMA Serversiemens_psirt
Update to V14 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801374/
FixedSINUMERIK ONE virtualsiemens_psirt
Update to V6.14 or later version The update can be obtained from Siemens representative or via Siemens customer service
FixedSINUMERIK Operatesiemens_psirt
Update to V6.14 or later version The update can be obtained from Siemens representative or via Siemens customer service
FixedSIMATIC Automation Toolcisa_csaf_ot
Update to V4 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/98161300/
FixedSIMATIC NET PC Software V14cisa_csaf_ot
Update to V14 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807351/
FixedSIMATIC NET PC Software V16cisa_csaf_ot
Update to V16 Upd3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780209/
FixedSIMATIC PCS neocisa_csaf_ot
Update to V3.0 SP1 or later version To obtain SIMATIC PCS neo V3.0 SP1 contact your local support.
FixedSIMATIC ProSavecisa_csaf_ot
Update to V17 or later version <https://support.industry.siemens.com/cs/ww/en/view/10347815/> Note: Some versions of SIMATIC ProSave are not available as separate download (e.g. V17). In this case, use the version of SIMATIC ProSave as bundled with the corresponding version of SIMATIC WinCC (TIA Portal).
FixedSIMATIC S7-1500 Software Controllercisa_csaf_ot
Update to V21.8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478528/
FixedSIMATIC STEP 7 (TIA Portal) V13cisa_csaf_ot
Update to V13 SP2 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759753/
FixedSIMATIC STEP 7 (TIA Portal) V14cisa_csaf_ot
Update to V14 SP1 Update 10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747387
FixedSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
FixedSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
FixedSIMATIC STEP 7 V5cisa_csaf_ot
Update to V5.6 SP2 HF3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109779992/
FixedSIMATIC WinCC OA V3.16cisa_csaf_ot
Update to V3.16 P018 or later version
https://www.winccoa.com/downloads/category/versions-patches.html
FixedSIMATIC WinCC OA V3.17cisa_csaf_ot
Update to V3.17 P003 or later version
https://www.winccoa.com/downloads/category/versions-patches.html
FixedSIMATIC WinCC Runtime Advancedcisa_csaf_ot
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776018/
FixedSIMATIC WinCC Runtime Professional V13cisa_csaf_ot
Update to V13 SP2 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759782/
FixedSIMATIC WinCC Runtime Professional V14cisa_csaf_ot
Update to V14 SP1 Update 10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109747394/
FixedSIMATIC WinCC Runtime Professional V15cisa_csaf_ot
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763892/
FixedSIMATIC WinCC Runtime Professional V16cisa_csaf_ot
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109776017/
FixedSIMATIC WinCC V7.4cisa_csaf_ot
Update to V7.4 SP1 Update 14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109779373/
FixedSIMATIC WinCC V7.5cisa_csaf_ot
Update to V7.5 SP1 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109773812/
FixedSINAMICS STARTERcisa_csaf_ot
Update to V5.4 HF2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782792/
FixedSINAMICS Startdrivecisa_csaf_ot
Update to V16 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781202/
FixedSINEC NMScisa_csaf_ot
Update to version V1.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797645/
FixedSINEMA Servercisa_csaf_ot
Update to V14 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801374/
FixedSINUMERIK ONE virtualcisa_csaf_ot
Update to V6.14 or later version The update can be obtained from Siemens representative or via Siemens customer service
FixedSINUMERIK Operatecisa_csaf_ot
Update to V6.14 or later version The update can be obtained from Siemens representative or via Siemens customer service
MitigationSIMATIC Automation Toolsiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC NET PC Software V14siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC NET PC Software V15siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC NET PC Software V16siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC PCS neosiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC ProSavesiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC S7-1500 Software Controllersiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V13siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V14siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V15siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V16siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 V5siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC OA V3.16siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC OA V3.17siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Advancedsiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V13siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V14siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V15siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V16siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC V7.4siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC V7.5siemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINAMICS STARTERsiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINAMICS Startdrivesiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINEC NMSsiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINEMA Serversiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINUMERIK ONE virtualsiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINUMERIK Operatesiemens_psirt
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC Automation Toolcisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC NET PC Software V14cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC NET PC Software V15cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC NET PC Software V16cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC PCS neocisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC ProSavecisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC S7-1500 Software Controllercisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V13cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V14cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC STEP 7 V5cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC OA V3.16cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC OA V3.17cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Advancedcisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V13cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V14cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V15cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC Runtime Professional V16cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC V7.4cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSIMATIC WinCC V7.5cisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINAMICS STARTERcisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINAMICS Startdrivecisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINEC NMScisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINEMA Servercisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINUMERIK ONE virtualcisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
MitigationSINUMERIK Operatecisa_csaf_ot
Deactivate the Windows service called TraceConceptX. This leads to loss of tracing functionality and should only be considered as a temporary workaround.
No fix plannedSIMATIC NET PC Software V15siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC NET PC Software V15cisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.1–8.8

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.16.7mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-428USCWE-428USCWE-428USCWE-428US

affected products (154)

Products and version ranges known to be affected.

SIMATIC Automation Toolall versionscisa_csaf_otUS
SIMATIC NET PC Software V14all versionscisa_csaf_otUS
SIMATIC NET PC Software V15all versionscisa_csaf_otUS
SIMATIC NET PC Software V16all versionscisa_csaf_otUS
SIMATIC PCS neoall versionscisa_csaf_otUS
SIMATIC ProSaveall versionscisa_csaf_otUS
SIMATIC S7-1500 Software Controllerall versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V13all versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V14all versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V15all versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V16all versionscisa_csaf_otUS
SIMATIC STEP 7 V5all versionscisa_csaf_otUS
SIMATIC WinCC OA V3.16all versionscisa_csaf_otUS
SIMATIC WinCC OA V3.17all versionscisa_csaf_otUS
SIMATIC WinCC Runtime Advancedall versionscisa_csaf_otUS
SIMATIC WinCC Runtime Professional V13all versionscisa_csaf_otUS
SIMATIC WinCC Runtime Professional V14all versionscisa_csaf_otUS
SIMATIC WinCC Runtime Professional V15all versionscisa_csaf_otUS
SIMATIC WinCC Runtime Professional V16all versionscisa_csaf_otUS
SIMATIC WinCC V7.4all versionscisa_csaf_otUS

showing 20 of 154

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-312271SSA-312271: Unquoted Search Path Vulnerability in Windows-based Industrial Software Applications2020-06-09csaf · siemens_psirtDE
Several industrial products as listed below contain a local privilege escalation vulnerability that could allow a local attacker to execute arbitrary code with SYTEM privileges. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-20-161-04Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update J)2020-06-09icsa · cisa_csaf_otUS
Several industrial products as listed below contain a local privilege escalation vulnerability that could allow a local attacker to execute arbitrary code with SYTEM privileges. Siemens has released updates for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2020-06-10modified 2026-06-17

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan