PT-2020-19635 · Siemens · Camstar Enterprise Platform+1

Published 2020-07-14 · Updated 2020-07-17 · CVE-2020-7578

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Camstar Enterprise Platform (all versions) Opcenter Execution Core versions prior to V8.2

Description A vulnerability has been identified that allows authenticated users to access resources they normally would not have, potentially enabling an attacker to view internal information and perform unauthorized changes.

Recommendations For Camstar Enterprise Platform, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Opcenter Execution Core versions prior to V8.2, update to version V8.2 or later to resolve the issue.

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-284

CWE-269

Related Identifiers

CVE-2020-7578

Affected Products

Camstar Enterprise Platform

Opcenter Execution Core

References · 3

• https://cert-portal.siemens.com/productcert/pdf/ssa-604937.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7578 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7578 · Security Note