Buffer overflow in Siemens Simatic_pcs_7
CVE-2020-7586
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (con…
Vulnerability class: Buffer Overflow
EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Siemens Simatic_pcs_7
- Siemens Simatic Pcs 7 V8.2 And Earlier — versions All versions
- Siemens Simatic Pcs 7 V9.0 — versions All versions < V9.0 SP3
- Siemens Simatic Pdm — versions All versions < V9.2
- Siemens Simatic_process_device_manager
- Siemens Simatic_step_7 — versions 5.6
- Siemens Simatic Step 7 V5.x — versions All versions < V5.6 SP2 HF3
- Siemens Sinamics_starter — versions 5.4
- Siemens Sinamics Starter (Containing Step 7 Oem Version) — versions All versions < V5.4 HF2
Weakness classification (CWE)
References
- productcert@siemens.com (x_refsource_MISC, Vendor Advisory)
- productcert@siemens.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
- productcert@siemens.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2020-7586?
- CVE-2020-7586 is a high-severity vulnerability in Siemens Simatic_pcs_7, classified under Heap-based Buffer Overflow. CVSS score: 7.8/10. Published 2020-06-10.
- How severe is CVE-2020-7586?
- High severity. CVSS v3 base score is 7.8 out of 10.