VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026

CVE-2020-7580

CVE-2020-7580

Description

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software V16 (All versions < V16 Upd3), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC ProSave (All versions < V17), SIMATIC S7-1500 Software Controller (All versions < V21.8), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2 Update 4), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1 Update 10), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMATIC STEP 7 V5 (All versions < V5.6 SP2 HF3), SIMATIC WinCC OA V3.16 (All versions < V3.16 P018), SIMATIC WinCC OA V3.17 (All versions < V3.17 P003), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 2), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Update 4), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Update 10), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Update 5), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (All versions < V7.5 SP1 Update 3), SINAMICS STARTER (All Versions < V5.4 HF2), SINAMICS Startdrive (All Versions < V16 Update 3), SINEC NMS (All versions < V1.0 SP2), SINEMA Server (All versions < V14 SP3), SINUMERIK ONE virtual (All Versions < V6.14), SINUMERIK Operate (All Versions < V6.14). A common component used by the affected applications regularly calls a helper binary with SYSTEM privileges while the call path is not quoted. This could allow a local attacker to execute arbitrary code with SYTEM privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

73
  • Siemens Foundation/Simatic Automatic Tool
    cpe:2.3:a:siemens:simatic_automatic_tool:*:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Net Pc3 versions
    cpe:2.3:a:siemens:simatic_net_pc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:simatic_net_pc:*:*:*:*:*:*:*:*range: <16
    • cpe:2.3:a:siemens:simatic_net_pc:16:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_net_pc:16:update1:*:*:*:*:*:*
  • Siemens Foundation/Simatic Pcs72 versions
    cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*
    • (no CPE)range: All versions < V3.0 SP1
  • Siemens Foundation/PCS neo
    cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Prosave2 versions
    cpe:2.3:a:siemens:simatic_prosave:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:simatic_prosave:*:*:*:*:*:*:*:*
    • (no CPE)range: All versions < V17
  • Siemens Foundation/Simatic S7 1500 Software Controller2 versions
    cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:*range: <21.8
    • (no CPE)range: All versions < V21.8
  • Siemens Foundation/SIMATIC STEP76 versions
    cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*range: <5.6
    • cpe:2.3:a:siemens:simatic_step_7:5.6:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_step_7:5.6:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_step_7:5.6:sp2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_step_7:5.6:sp2_hotfix1:*:*:*:*:*:*
    • (no CPE)range: All versions < V5.6 SP2 HF3
  • Siemens Foundation/Wincc24 versions
    cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*range: <7.4
    • cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update10:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update11:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update12:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update13:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update2:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update3:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update4:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update5:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update6:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update7:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update8:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.4:sp1_update9:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*
    • (no CPE)range: All versions < V3.16 P018
    • (no CPE)range: All versions < V3.17 P003
    • (no CPE)range: All versions < V7.4 SP1 Update 14
    • (no CPE)range: All versions < V7.5 SP1 Update 3
  • Siemens Foundation/Wincc Open Architecture2 versions
    cpe:2.3:a:siemens:simatic_wincc_open_architecture:3.16:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:simatic_wincc_open_architecture:3.16:*:*:*:*:*:*:*
    • cpe:2.3:a:siemens:simatic_wincc_open_architecture:3.17:*:*:*:*:*:*:*
  • Siemens Foundation/Wincc Runtime Advanced2 versions
    cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*
    • (no CPE)range: All versions < V16 Update 2
  • Siemens Foundation/Simatic Wincc Runtime Professional
    cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*
    Range: >=13,<=16
  • Siemens Foundation/Sinamics Startdrive
    cpe:2.3:a:siemens:sinamics_startdrive:*:*:*:*:*:*:*:*
  • Siemens Foundation/Sinamics Starter Commissioning Tool
    cpe:2.3:a:siemens:sinamics_starter_commissioning_tool:*:*:*:*:*:*:*:*
  • Siemens Foundation/Sinec Network Management System
    cpe:2.3:a:siemens:sinec_network_management_system:*:*:*:*:*:*:*:*
  • Siemens Foundation/Sinema Server2 versions
    cpe:2.3:a:siemens:sinema_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:sinema_server:*:*:*:*:*:*:*:*
    • (no CPE)range: All versions < V14 SP3
  • Siemens Foundation/Sinumerik One Virtual
    cpe:2.3:a:siemens:sinumerik_one_virtual:*:*:*:*:*:*:*:*
  • Siemens Foundation/Sinumerik Operate2 versions
    cpe:2.3:a:siemens:sinumerik_operate:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:siemens:sinumerik_operate:*:*:*:*:*:*:*:*
    • (no CPE)range: All Versions < V6.14
  • Siemens Foundation/Simatic Automation Toolllm-fuzzy2 versions
    < V4 SP2+ 1 more
    • (no CPE)range: < V4 SP2
    • (no CPE)range: All versions < V4 SP2
  • Siemens Foundation/Simatic Net Pc Softwarellm-fuzzy4 versions
    < V14 SP1 Update 14, < V15, < V16 Upd3+ 3 more
    • (no CPE)range: < V14 SP1 Update 14, < V15, < V16 Upd3
    • (no CPE)range: All versions < V14 SP1 Update 14
    • (no CPE)range: All versions
    • (no CPE)range: All versions < V16 Upd3
  • Siemens Foundation/Simatic Step 7 \(tia Portal\)llm-fuzzy5 versions
    < V13 SP2 Update 4, < V14 SP1 Update 10, < V15.1 Update 5, < V16 Update 2+ 4 more
    • (no CPE)range: < V13 SP2 Update 4, < V14 SP1 Update 10, < V15.1 Update 5, < V16 Update 2
    • (no CPE)range: All versions < V13 SP2 Update 4
    • (no CPE)range: All versions < V14 SP1 Update 10
    • (no CPE)range: All versions < V15.1 Update 5
    • (no CPE)range: All versions < V16 Update 2
  • Siemens Foundation/Simatic Wincc Runtimecpe-rescue4 versions
    All versions < V13 SP2 Update 4+ 3 more
    • (no CPE)range: All versions < V13 SP2 Update 4
    • (no CPE)range: All versions < V14 SP1 Update 10
    • (no CPE)range: All versions < V15.1 Update 5
    • (no CPE)range: All versions < V16 Update 2
  • Siemens Foundation/Sinamics Startercpe-rescue2 versions
    All Versions < V16 Update 3+ 1 more
    • (no CPE)range: All Versions < V16 Update 3
    • (no CPE)range: All Versions < V5.4 HF2
  • Siemens Foundation/Sinec Nmscpe-rescue
    Range: All versions < V1.0 SP2
  • Siemens Foundation/SINUMERIK ONEcpe-rescue
    Range: All Versions < V6.14

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.