Lucene search

[email protected]CVE-2020-7581

HistoryJul 14, 2020 - 2:15 p.m.

CVE-2020-7581

2020-07-1414:15:18

CWE-428

[email protected]

web.nvd.nist.gov

vulnerability

siemens

opcenter

execution discrete

execution foundation

execution process

intelligence

quality

simatic

notifier server

pcs neo

step 7

tia portal

simocode es

soft starter es

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges.

Affected configurations

NVD

Node

siemensopcenter_execution_discreteRange<3.2

siemensopcenter_execution_foundationRange<3.2

siemensopcenter_execution_processRange<3.2

siemensopcenter_intelligence

siemensopcenter_qualityRange<11.3

siemensopcenter_rd\&lMatch8.0

siemenssimatic_notifier_serverwindows

siemenssimatic_pcs_neo

siemenssimatic_step_7Range<16

siemenssimatic_step_7Match16-

siemenssimatic_step_7Match16update1

siemenssimocode_es

siemenssoft_starter_es

CPENameOperatorVersion
siemens:opcenter_execution_discretesiemens opcenter execution discretelt3.2
siemens:opcenter_execution_foundationsiemens opcenter execution foundationlt3.2
siemens:opcenter_execution_processsiemens opcenter execution processlt3.2
siemens:opcenter_intelligencesiemens opcenter intelligenceeq*
siemens:opcenter_qualitysiemens opcenter qualitylt11.3
siemens:opcenter_rd\&lsiemens opcenter rd&leq8.0
siemens:simatic_notifier_serversiemens simatic notifier servereq*
siemens:simatic_pcs_neosiemens simatic pcs neoeq*
siemens:simatic_step_7siemens simatic step 7lt16
siemens:simocode_essiemens simocode eseq*

CPE	Name	Operator	Version
siemens:opcenter_execution_discrete	siemens opcenter execution discrete	lt	3.2
siemens:opcenter_execution_foundation	siemens opcenter execution foundation	lt	3.2
siemens:opcenter_execution_process	siemens opcenter execution process	lt	3.2
siemens:opcenter_intelligence	siemens opcenter intelligence	eq	*
siemens:opcenter_quality	siemens opcenter quality	lt	11.3
siemens:opcenter_rd\&l	siemens opcenter rd&l	eq	8.0
siemens:simatic_notifier_server	siemens simatic notifier server	eq	*
siemens:simatic_pcs_neo	siemens simatic pcs neo	eq	*
siemens:simatic_step_7	siemens simatic step 7	lt	16
siemens:simocode_es	siemens simocode es	eq	*

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "product": "Opcenter Execution Discrete",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.2"
      }
    ]
  },
  {
    "product": "Opcenter Execution Foundation",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.2"
      }
    ]
  },
  {
    "product": "Opcenter Execution Process",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.2"
      }
    ]
  },
  {
    "product": "Opcenter Intelligence",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "Opcenter Quality",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V11.3"
      }
    ]
  },
  {
    "product": "Opcenter RD&L",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V8.0"
      }
    ]
  },
  {
    "product": "SIMATIC Notifier Server for Windows",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "SIMATIC PCS neo",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0 SP1"
      }
    ]
  },
  {
    "product": "SIMATIC STEP 7 (TIA Portal) V15",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V15.1 Update 5"
      }
    ]
  },
  {
    "product": "SIMATIC STEP 7 (TIA Portal) V16",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16 Update 2"
      }
    ]
  },
  {
    "product": "SIMOCODE ES V15.1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V15.1 Update 4"
      }
    ]
  },
  {
    "product": "SIMOCODE ES V16",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16 Update 1"
      }
    ]
  },
  {
    "product": "Soft Starter ES V15.1",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V15.1 Update 3"
      }
    ]
  },
  {
    "product": "Soft Starter ES V16",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V16 Update 1"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-7581

prion1 cvelist1 nvd1 ics1