8.2

CVE-2020-7587

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Opcenter Intelligence Version < 3.3
Siemens ≫ Opcenter Quality Version < 11.3
Siemens ≫ Opcenter Rd&l Version 8.0
Siemens ≫ Simatic It Lms Version < 2.6
Siemens ≫ Simatic Notifier Server SwPlatform windows
Siemens ≫ Simatic Pcs Neo Version < 3.0
Siemens ≫ Simatic Pcs Neo Version 3.0 Update -
Siemens ≫ Simatic Step 7 Version >= 15 < 15.1
Siemens ≫ Simatic Step 7 Version 15.1 Update -
Siemens ≫ Simatic Step 7 Version 16 Update -
Siemens ≫ Simatic Step 7 Version 16 Update update1
Siemens ≫ Simocode Es Version < 15.1
Siemens ≫ Simocode Es Version 15.1 Update -
Siemens ≫ Simocode Es Version 16 Update -
Siemens ≫ Soft Starter Es Version < 15.1
Siemens ≫ Soft Starter Es Version 15.1 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.48% 0.825
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf
Vendor Advisory