PT-2020-6694 · Siemens · Simocode Es+10

Published 2020-07-14 · Updated 2023-01-30 · CVE-2020-7581

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Opcenter Execution Discrete versions prior to V3.2 Opcenter Execution Foundation versions prior to V3.2 Opcenter Execution Process versions prior to V3.2 Opcenter Intelligence versions prior to V3.3 Opcenter Quality versions prior to V11.3 Opcenter RD&L version V8.0 SIMATIC Notifier Server for Windows (affected versions not specified) SIMATIC PCS neo versions prior to V3.0 SP1 SIMATIC STEP 7 (TIA Portal) V15 versions prior to V15.1 Update 5 SIMATIC STEP 7 (TIA Portal) V16 versions prior to V16 Update 2 SIMOCODE ES V15.1 versions prior to V15.1 Update 4 SIMOCODE ES V16 versions prior to V16 Update 1 Soft Starter ES V15.1 versions prior to V15.1 Update 3 Soft Starter ES V16 versions prior to V16 Update 1

Description A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges. The issue is related to the absence of quotes in writing elements or search paths.

Recommendations For Opcenter Execution Discrete versions prior to V3.2, update to version V3.2 or later. For Opcenter Execution Foundation versions prior to V3.2, update to version V3.2 or later. For Opcenter Execution Process versions prior to V3.2, update to version V3.2 or later. For Opcenter Intelligence versions prior to V3.3, update to version V3.3 or later. For Opcenter Quality versions prior to V11.3, update to version V11.3 or later. For Opcenter RD&L version V8.0, apply the recommended patch or update. For SIMATIC Notifier Server for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For SIMATIC PCS neo versions prior to V3.0 SP1, update to version V3.0 SP1 or later. For SIMATIC STEP 7 (TIA Portal) V15 versions prior to V15.1 Update 5, update to version V15.1 Update 5 or later. For SIMATIC STEP 7 (TIA Portal) V16 versions prior to V16 Update 2, update to version V16 Update 2 or later. For SIMOCODE ES V15.1 versions prior to V15.1 Update 4, update to version V15.1 Update 4 or later. For SIMOCODE ES V16 versions prior to V16 Update 1, update to version V16 Update 1 or later. For Soft Starter ES V15.1 versions prior to V15.1 Update 3, update to version V15.1 Update 3 or later. For Soft Starter ES V16 versions prior to V16 Update 1, update to version V16 Update 1 or later.

Weakness Enumeration

CWE-428

Related Identifiers

BDU:2022-04930

CVE-2020-7581

Affected Products

Opcenter Execution Discrete

Opcenter Execution Foundation

Opcenter Execution Process

Opcenter Intelligence

Opcenter Quality

Opcenter Rd&L

Simatic Notifier Server For Windows

Simatic Pcs Neo

Simatic Step 7

Simocode Es

Soft Starter Es

References · 4

• https://bdu.fstec.ru/vul/2022-04930 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7581 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7581 · Vendor Advisory