CVE-2020-7580

CVE-2020-7580 affects Siemens products (e.g., SIMATIC Automation Tool, STEP 7/TIA Portal, WinCC OA, ProSave, S7-1500 controllers, etc.). Root cause: a common component calls a helper binary with SYSTEM privileges while the call path is not quoted (unquoted search path/element CWE-428). This could...

CVE-2017-2685

CVE-2017-2685 affects Siemens SINUMERIK Integrate Operate Clients. Affected: SINUMERIK Integrate Operate Client in versions within 2.0.3.00.016–2.0.6 (inclusive/exclusive bounds as listed) and 3.0.4.00.032–3.0.6. The issue is a man-in-the-middle vulnerability allowing reading and modification of ...