The vulnerabilities of the microprogramming software for Siemens STEP 7 programmable logic controllers, the systems for managing production processes such as Opcenter Execution Discrete, Opcenter Execution Process, Opcenter Execution Foundation, Opcenter Intelligence, Opcenter Quality, SIMATIC IT Production Suite, the system diagnostic tool SIMOCODE ES, the software for parameterizing, diagnosing, and documenting the startup process of SIRIUS Soft Starter ES, the web-based systems for managing technological processes like SIMATIC PCS neo, the Opcenter RD&L software platform, and the software for analyzing equipment efficiency and key indicators like SIMATIC IT LMS. These vulnerabilities arise from the absence of quotation marks in the wording of elements or search methods, which allows attackers to exploit them to gain elevated privileges to the root level.

Vulnerabilities in Siemens Step seven and related Opcenter and Simatic IT tools from missing quotes in queries, enabling root access.

Reporter	Title	Published	Views	Family All 12
CVE	CVE-2020-7581	14 Jul 202013:18	–	cve
Cvelist	CVE-2020-7581	14 Jul 202013:18	–	cvelist
EUVD	EUVD-2020-28706	7 Oct 202500:30	–	euvd
ICS	Siemens UMC Stack (Update H)	14 Jul 202000:00	–	ics
NCSC	Vulnerabilities fixed in Siemens vulnerabilities	8 Dec 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	13 Apr 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Siemens SIMATIC	13 Jul 202100:00	–	ncsc
NVD	CVE-2020-7581	14 Jul 202014:15	–	nvd
OSV	CVE-2020-7581	14 Jul 202014:15	–	osv
Prion	Design/Logic Flaw	14 Jul 202014:15	–	prion