CVE-2020-7581

highpriority · track · 27EPSS 0.004 · 32 %ileDEEURUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.38% (32nd) EPSS
CVSS 7.2 · high
Is it mine?
83 products
Check your exposure
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedOpcenter Execution Discretesiemens_psirt

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Execution Foundationsiemens_psirt

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Execution Processsiemens_psirt

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Intelligencesiemens_psirt

    Update to V3.3 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Qualitysiemens_psirt

    Update to V11.3 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter RD&Lsiemens_psirt

    Update to V8.1 or later version

    https://support.sw.siemens.com/
  • FixedSIMATIC PCS neosiemens_psirt

    Update to V3.0 SP1 or later version

  • FixedSIMATIC STEP 7 (TIA Portal) V15siemens_psirt

    Update to V15.1 Update 5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890/
  • FixedSIMATIC STEP 7 (TIA Portal) V16siemens_psirt

    Update to V16 Update 2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • FixedSIMOCODE ES V15.1siemens_psirt

    Update to V15 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768994/
  • FixedSIMOCODE ES V16siemens_psirt

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109781888/
  • FixedSoft Starter ES V15.1siemens_psirt

    Update to V15 Update 3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769017/
  • FixedSoft Starter ES V16siemens_psirt

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109771657/
  • FixedOpcenter Execution Discretecisa_csaf_ot

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Execution Foundationcisa_csaf_ot

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Execution Processcisa_csaf_ot

    Update to V3.2 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Intelligencecisa_csaf_ot

    Update to V3.3 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter Qualitycisa_csaf_ot

    Update to V11.3 or later version

    https://support.sw.siemens.com/
  • FixedOpcenter RD&Lcisa_csaf_ot

    Update to V8.1 or later version

    https://support.sw.siemens.com/
  • FixedSIMATIC PCS neocisa_csaf_ot

    Update to V3.0 SP1 or later version. To obtain SIMATIC PCS neo contact your local support.

  • FixedSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot

    Update to V15.1 Update 5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763890/
  • FixedSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot

    Update to V16 Update 2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109775861/
  • FixedSIMOCODE ES V15.1cisa_csaf_ot

    Update to V15 Update 4 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109768994/
  • FixedSIMOCODE ES V16cisa_csaf_ot

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109781888/
  • FixedSoft Starter ES V15.1cisa_csaf_ot

    Update to V15 Update 3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109769017/
  • FixedSoft Starter ES V16cisa_csaf_ot

    Update to V16 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109771657/
  • MitigationOpcenter Execution Discretesiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Foundationsiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Processsiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Intelligencesiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Qualitysiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter RD&Lsiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC Notifier Server for Windowssiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC PCS neosiemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V15siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V16siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V15.1siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V16siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V15.1siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V16siemens_psirt

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Discretecisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Foundationcisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Execution Processcisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Intelligencecisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter Qualitycisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationOpcenter RD&Lcisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC Notifier Server for Windowscisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC PCS neocisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V15.1cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSIMOCODE ES V16cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V15.1cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • MitigationSoft Starter ES V16cisa_csaf_ot

    CVE-2020-7581: Make sure that there is no executable at the following locations: C:\Program.exe, C:\Program Files\Common.exe, or C:\Program Files\Common Files\Siemens\Automation\Simatic.exe

  • No fix plannedSIMATIC Notifier Server for Windowssiemens_psirt

    Currently no fix is planned

  • No fix plannedSIMATIC Notifier Server for Windowscisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

7.2
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.1–7.2

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.8 · impact 5.9
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.16.7mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-428USCWE-428USCWE-428USCWE-428US
04

affected products (83)

Products and version ranges known to be affected.

showing 20 of 83
05

advisories (2)

Vendor and ecosystem advisories describing this.

  • SSA-841348SSA-841348: Multiple Vulnerabilities in the UMC Component2020-07-14csaf · siemens_psirtDE

    The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

  • ICSA-20-196-05Siemens UMC Stack (Update H)2020-07-14icsa · cisa_csaf_otUS

    The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

06

also known as (4)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bducisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
published 2020-07-14modified 2026-06-17
08

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan