CVE-2020-7587 - A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1)

Back Back to CVE browser

HIGH

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1)

Published Jul 14, 2020

8.2

HIGH

CVSS 3.1

EPSS 2.48%

Description

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.

Affected products

Vendor Siemens Product Opcenter Execution Discrete Default
n/a
- Version
  All versions < V3.2
  Status
  affected
  Constraints
  -
Vendor Siemens Product Opcenter Execution Foundation Default
n/a
- Version
  All versions < V3.2
  Status
  affected
  Constraints
  -
Vendor Siemens Product Opcenter Execution Process Default
n/a
- Version
  All versions < V3.2
  Status
  affected
  Constraints
  -
Vendor Siemens Product Opcenter Intelligence Default
n/a
- Version
  All versions < V3.3
  Status
  affected
  Constraints
  -
Vendor Siemens Product Opcenter Quality Default
n/a
- Version
  All versions < V11.3
  Status
  affected
  Constraints
  -
Vendor Siemens Product Opcenter RD&L Default
n/a
- Version
  V8.0
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simatic IT Lms Default
n/a
- Version
  All versions < V2.6
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC IT Production Suite Default
n/a
- Version
  All versions < V8.0
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC Notifier Server for Windows Default
n/a
- Version
  All versions
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC PCS neo Default
n/a
- Version
  All versions < V3.0 SP1
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC STEP 7 (TIA Portal) V15 Default
n/a
- Version
  All versions < V15.1 Update 5
  Status
  affected
  Constraints
  -
Vendor Siemens Product SIMATIC STEP 7 (TIA Portal) V16 Default
n/a
- Version
  All versions < V16 Update 2
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simocode ES V15.1 Default
n/a
- Version
  All versions < V15.1 Update 4
  Status
  affected
  Constraints
  -
Vendor Siemens Product Simocode ES V16 Default
n/a
- Version
  All versions < V16 Update 1
  Status
  affected
  Constraints
  -
Vendor Siemens Product Soft Starter ES V15.1 Default
n/a
- Version
  All versions < V15.1 Update 3
  Status
  affected
  Constraints
  -
Vendor Siemens Product Soft Starter ES V16 Default
n/a
- Version
  All versions < V16 Update 1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Description

Affected products

Remediation

References (1)

Change history (0)