CVE-2020-7580

Severity Score

6.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMATIC STEP 7 V5 (All versions < V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions < V3.16 P018), SIMATIC WinCC OA V3.17 (All versions < V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 3), SINAMICS STARTER (All Versions < V5.4 HF2), SINAMICS Startdrive (All Versions < V16 Update 3), SINEC NMS (All versions < V1.0 SP2), SINEMA Server (All versions < V14 SP3), SINUMERIK ONE virtual (All Versions < V6.14), SINUMERIK Operate (All Versions < V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges.

Se ha identificado una vulnerabilidad en SIMATIC Automation Tool (Todas las versiones anteriores a la versión V4 SP2), SIMATIC NET PC Software V14 (Todas las versiones anteriores a la versión V14 SP1 Update 14), SIMATIC NET PC Software V15 (Todas las versiones), SIMATIC NET PC Software V16 (Todas las versiones anteriores a la versión V16 Upd3), SIMATIC PCS neo (Todas las versiones anteriores a la versión V3.0 SP1), SIMATIC ProSave (Todas las versiones anteriores a la versión V17), SIMATIC S7-1500 Software Controller (Todas las versiones anteriores a la versión V21. 8), SIMATIC STEP 7 (Todas las versiones anteriores a la versión V5.6 SP2 HF3), SIMATIC STEP 7 (TIA Portal) V13 (Todas las versiones anteriores a la versión V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (Todas las versiones anteriores a la versión V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (Todas las versiones anteriores a la versión V15. 1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (Todas las versiones anteriores a la versión V16 Update 2), SIMATIC WinCC OA V3.16 (Todas las versiones anteriores a la versión V3.16 P018), SIMATIC WinCC OA V3. 17 (Todas las versiones anteriores a la versión V3.17 P003), SIMATIC WinCC Runtime Advanced (Todas las versiones anteriores a la versión V16 Update 2), SIMATIC WinCC Runtime Professional V13 (Todas las versiones anteriores a la versión V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (Todas las versiones anteriores a la versión V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (Todas las versiones anteriores a la versión V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (Todas las versiones anteriores a la versión V16 Update 2), SIMATIC WinCC V7. 4 (Todas las versiones anteriores a la versión V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (Todas las versiones anteriores a la versión V7.5 SP1 Update 3), SINAMICS STARTER (Todas las versiones anteriores a la versión V5.4 HF2), SINAMICS Startdrive (Todas las versiones anteriores a la versión V16 Update 3), SINEC NMS (Todas las versiones anteriores a la versión V1. 0 SP2), SINEMA Server (Todas las versiones anteriores a la versión V14 SP3), SINUMERIK ONE virtual (Todas las versiones anteriores a la versión V6.14), SINUMERIK Operate (Todas las versiones anteriores a la versión V6.14). Un componente dentro de la aplicación afectada llama regularmente a un binario de ayuda con privilegios de SISTEMA mientras la ruta de llamada no está citada

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-01-21 CVE Reserved
2020-06-10 CVE Published
2023-03-08 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-428: Unquoted Search Path or Element

CAPEC

References (2)

URL	Tag	Source
https://us-cert.cisa.gov/ics/advisories/icsa-20-161-04	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://cert-portal.siemens.com/productcert/pdf/ssa-312271.pdf	2023-04-28

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Siemens Search vendor "Siemens"		Simatic Automatic Tool Search vendor "Siemens" for product "Simatic Automatic Tool"				*		-		Affected
Siemens Search vendor "Siemens"		Simatic Net Pc Search vendor "Siemens" for product "Simatic Net Pc"				< 16 Search vendor "Siemens" for product "Simatic Net Pc" and version " < 16"		-		Affected
Siemens Search vendor "Siemens"		Simatic Net Pc Search vendor "Siemens" for product "Simatic Net Pc"				16 Search vendor "Siemens" for product "Simatic Net Pc" and version "16"		-		Affected
Siemens Search vendor "Siemens"		Simatic Net Pc Search vendor "Siemens" for product "Simatic Net Pc"				16 Search vendor "Siemens" for product "Simatic Net Pc" and version "16"		update1		Affected
Siemens Search vendor "Siemens"		Simatic Pcs 7 Search vendor "Siemens" for product "Simatic Pcs 7"				*		-		Affected
Siemens Search vendor "Siemens"		Simatic Pcs Neo Search vendor "Siemens" for product "Simatic Pcs Neo"				*		-		Affected
Siemens Search vendor "Siemens"		Simatic Prosave Search vendor "Siemens" for product "Simatic Prosave"				*		-		Affected
Siemens Search vendor "Siemens"		Simatic S7-1500 Software Controller Search vendor "Siemens" for product "Simatic S7-1500 Software Controller"				< 21.8 Search vendor "Siemens" for product "Simatic S7-1500 Software Controller" and version " < 21.8"		-		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				< 5.6 Search vendor "Siemens" for product "Simatic Step 7" and version " < 5.6"		-		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				>= 13 <= 16 Search vendor "Siemens" for product "Simatic Step 7" and version " >= 13 <= 16"		-		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.6 Search vendor "Siemens" for product "Simatic Step 7" and version "5.6"		-		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.6 Search vendor "Siemens" for product "Simatic Step 7" and version "5.6"		sp1		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.6 Search vendor "Siemens" for product "Simatic Step 7" and version "5.6"		sp2		Affected
Siemens Search vendor "Siemens"		Simatic Step 7 Search vendor "Siemens" for product "Simatic Step 7"				5.6 Search vendor "Siemens" for product "Simatic Step 7" and version "5.6"		sp2_hotfix1		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				< 7.4 Search vendor "Siemens" for product "Simatic Wincc" and version " < 7.4"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update1		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update10		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update11		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update12		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update13		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update2		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update3		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update4		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update5		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update6		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update7		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update8		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.4 Search vendor "Siemens" for product "Simatic Wincc" and version "7.4"		sp1_update9		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.5 Search vendor "Siemens" for product "Simatic Wincc" and version "7.5"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.5 Search vendor "Siemens" for product "Simatic Wincc" and version "7.5"		sp1		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.5 Search vendor "Siemens" for product "Simatic Wincc" and version "7.5"		sp1_update1		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Search vendor "Siemens" for product "Simatic Wincc"				7.5 Search vendor "Siemens" for product "Simatic Wincc" and version "7.5"		sp1_update2		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Open Architecture Search vendor "Siemens" for product "Simatic Wincc Open Architecture"				3.16 Search vendor "Siemens" for product "Simatic Wincc Open Architecture" and version "3.16"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Open Architecture Search vendor "Siemens" for product "Simatic Wincc Open Architecture"				3.17 Search vendor "Siemens" for product "Simatic Wincc Open Architecture" and version "3.17"		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Runtime Advanced Search vendor "Siemens" for product "Simatic Wincc Runtime Advanced"				*		-		Affected
Siemens Search vendor "Siemens"		Simatic Wincc Runtime Professional Search vendor "Siemens" for product "Simatic Wincc Runtime Professional"				>= 13 <= 16 Search vendor "Siemens" for product "Simatic Wincc Runtime Professional" and version " >= 13 <= 16"		-		Affected
Siemens Search vendor "Siemens"		Sinamics Startdrive Search vendor "Siemens" for product "Sinamics Startdrive"				*		-		Affected
Siemens Search vendor "Siemens"		Sinamics Starter Commissioning Tool Search vendor "Siemens" for product "Sinamics Starter Commissioning Tool"				*		-		Affected
Siemens Search vendor "Siemens"		Sinec Network Management System Search vendor "Siemens" for product "Sinec Network Management System"				*		-		Affected
Siemens Search vendor "Siemens"		Sinema Server Search vendor "Siemens" for product "Sinema Server"				*		-		Affected
Siemens Search vendor "Siemens"		Sinumerik One Virtual Search vendor "Siemens" for product "Sinumerik One Virtual"				*		-		Affected
Siemens Search vendor "Siemens"		Sinumerik Operate Search vendor "Siemens" for product "Sinumerik Operate"				*		-		Affected