8.2
CVE-2020-7587
- EPSS 0.5%
- Veröffentlicht 14.07.2020 14:15:18
- Zuletzt bearbeitet 21.11.2024 05:37:25
- Quelle productcert@siemens.com
- Teams Watchlist Login
- Unerledigt Login
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). Sending multiple specially crafted packets to the affected service could cause a partial remote denial-of-service, that would cause the service to restart itself. On some cases the vulnerability could leak random information from the remote service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Opcenter Execution Discrete Version < 3.2
Siemens ≫ Opcenter Execution Foundation Version < 3.2
Siemens ≫ Opcenter Execution Process Version < 3.2
Siemens ≫ Opcenter Intelligence Version < 3.3
Siemens ≫ Opcenter Quality Version < 11.3
Siemens ≫ Opcenter Rd&l Version8.0
Siemens ≫ Simatic It Lms Version < 2.6
Siemens ≫ Simatic It Production Suite Version < 8.0
Siemens ≫ Simatic Notifier Server SwPlatformwindows
Siemens ≫ Simatic Pcs Neo Version < 3.0
Siemens ≫ Simatic Pcs Neo Version3.0 Update-
Siemens ≫ Simatic Step 7 Version >= 15 < 15.1
Siemens ≫ Simatic Step 7 Version15.1 Update-
Siemens ≫ Simatic Step 7 Version16 Update-
Siemens ≫ Simatic Step 7 Version16 Updateupdate1
Siemens ≫ Simocode Es Version < 15.1
Siemens ≫ Simocode Es Version15.1 Update-
Siemens ≫ Simocode Es Version16 Update-
Siemens ≫ Soft Starter Es Version < 15.1
Siemens ≫ Soft Starter Es Version15.1 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.5% | 0.648 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 8.2 | 3.9 | 4.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
|
nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:P
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.