CVE-2020-7587

mediumpriority · track · 34EPSS 0.025 · 85 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.48% (85th) EPSS

CVSS 6.4 · medium

Is it mine?

98 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedOpcenter Execution Discretesiemens_psirt
Update to V3.2 or later version
https://support.sw.siemens.com/
FixedOpcenter Execution Foundationsiemens_psirt
Update to V3.2 or later version
https://support.sw.siemens.com/
FixedOpcenter Execution Processsiemens_psirt
Update to V3.2 or later version
https://support.sw.siemens.com/
FixedOpcenter Intelligencesiemens_psirt
Update to V3.3 or later version
https://support.sw.siemens.com/
FixedOpcenter Qualitysiemens_psirt
Update to V11.3 or later version
https://support.sw.siemens.com/
FixedOpcenter RD&Lsiemens_psirt
Update to V8.1 or later version
https://support.sw.siemens.com/
FixedSIMATIC IT LMSsiemens_psirt
Update to V2.6 or later version
https://support.sw.siemens.com/
FixedSIMATIC IT Production Suitesiemens_psirt
Update to V8.0 or later version
https://support.sw.siemens.com/
FixedSIMATIC PCS neosiemens_psirt
Update to V3.0 SP1 or later version
FixedSIMATIC STEP 7 (TIA Portal) V15siemens_psirt
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
FixedSIMATIC STEP 7 (TIA Portal) V16siemens_psirt
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
FixedSIMOCODE ES V15.1siemens_psirt
Update to V15 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768994/
FixedSIMOCODE ES V16siemens_psirt
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781888/
FixedSoft Starter ES V15.1siemens_psirt
Update to V15 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109769017/
FixedSoft Starter ES V16siemens_psirt
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109771657/
FixedOpcenter Execution Discretecisa_csaf_ot
Update to V3.2 or later version
https://support.sw.siemens.com/
FixedOpcenter Execution Foundationcisa_csaf_ot
Update to V3.2 or later version
https://support.sw.siemens.com/
FixedOpcenter Execution Processcisa_csaf_ot
Update to V3.2 or later version
https://support.sw.siemens.com/
FixedOpcenter Intelligencecisa_csaf_ot
Update to V3.3 or later version
https://support.sw.siemens.com/
FixedOpcenter Qualitycisa_csaf_ot
Update to V11.3 or later version
https://support.sw.siemens.com/
FixedOpcenter RD&Lcisa_csaf_ot
Update to V8.1 or later version
https://support.sw.siemens.com/
FixedSIMATIC IT LMScisa_csaf_ot
Update to V2.6 or later version
https://support.sw.siemens.com/
FixedSIMATIC IT Production Suitecisa_csaf_ot
Update to V8.0 or later version
https://support.sw.siemens.com/
FixedSIMATIC PCS neocisa_csaf_ot
Update to V3.0 SP1 or later version. To obtain SIMATIC PCS neo contact your local support.
FixedSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot
Update to V15.1 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109763890/
FixedSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot
Update to V16 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109775861/
FixedSIMOCODE ES V15.1cisa_csaf_ot
Update to V15 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109768994/
FixedSIMOCODE ES V16cisa_csaf_ot
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109781888/
FixedSoft Starter ES V15.1cisa_csaf_ot
Update to V15 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109769017/
FixedSoft Starter ES V16cisa_csaf_ot
Update to V16 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109771657/
MitigationOpcenter Execution Discretesiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Execution Foundationsiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Execution Processsiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Intelligencesiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Qualitysiemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter RD&Lsiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC IT LMSsiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC IT Production Suitesiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC Notifier Server for Windowssiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC PCS neosiemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V15siemens_psirt
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V16siemens_psirt
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V15.1siemens_psirt
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V16siemens_psirt
Have the software running on systems within trusted networks
MitigationSoft Starter ES V15.1siemens_psirt
Have the software running on systems within trusted networks
MitigationSoft Starter ES V16siemens_psirt
Have the software running on systems within trusted networks
MitigationOpcenter Execution Discretecisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Execution Foundationcisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Execution Processcisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Intelligencecisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter Qualitycisa_csaf_ot
Have the software running on systems within trusted networks
MitigationOpcenter RD&Lcisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC IT LMScisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC IT Production Suitecisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC Notifier Server for Windowscisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC PCS neocisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V15cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMATIC STEP 7 (TIA Portal) V16cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V15.1cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSIMOCODE ES V16cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSoft Starter ES V15.1cisa_csaf_ot
Have the software running on systems within trusted networks
MitigationSoft Starter ES V16cisa_csaf_ot
Have the software running on systems within trusted networks
No fix plannedSIMATIC Notifier Server for Windowssiemens_psirt
Currently no fix is planned
No fix plannedSIMATIC Notifier Server for Windowscisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

8.2

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–8.2

v2.06.4mediumAV:N/AC:L/Au:N/C:P/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 4.9

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Lprimary · NVD / NIST USexploitability 3.9 · impact 4.2

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:Csecondary · CISA US

v3.16.5mediumAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USCWE-400USCWE-400USCWE-400US

affected products (98)

Products and version ranges known to be affected.

Opcenter Execution Discreteall versionscisa_csaf_otUS
Opcenter Execution Foundationall versionscisa_csaf_otUS
Opcenter Execution Processall versionscisa_csaf_otUS
Opcenter Intelligenceall versionscisa_csaf_otUS
Opcenter Qualityall versionscisa_csaf_otUS
Opcenter RD&Lall versionscisa_csaf_otUS
SIMATIC IT LMSall versionscisa_csaf_otUS
SIMATIC IT Production Suiteall versionscisa_csaf_otUS
SIMATIC Notifier Server for Windowsall versionscisa_csaf_otUS
SIMATIC PCS neoall versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V15all versionscisa_csaf_otUS
SIMATIC STEP 7 (TIA Portal) V16all versionscisa_csaf_otUS
SIMOCODE ES V15.1all versionscisa_csaf_otUS
SIMOCODE ES V16all versionscisa_csaf_otUS
Soft Starter ES V15.1all versionscisa_csaf_otUS
Soft Starter ES V16all versionscisa_csaf_otUS
Siemens Opcenter Execution Discrete< V3.2cisa_csaf_otUS
Siemens Opcenter Execution Foundation< V3.2cisa_csaf_otUS
Siemens Opcenter Execution Process< V3.2cisa_csaf_otUS
Siemens Opcenter Intelligence< V3.3cisa_csaf_otUS

showing 20 of 98

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-841348SSA-841348: Multiple Vulnerabilities in the UMC Component2020-07-14csaf · siemens_psirtDE
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
ICSA-20-196-05Siemens UMC Stack (Update H)2020-07-14icsa · cisa_csaf_otUS
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2020-07-14modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan