CVE-2020-7577

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-14 · updated 2026-06-17
Weakness: CWE-89

Description

A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to the back-end server. The exploit of this vulnerability could be used to read, and potentially modify application data to which the user has access to.

Affected products

Siemens Opcenter Execution Core: before 8.2 — fixed in 8.2

How to fix

Upgrade to a fixed version: Siemens Opcenter Execution Core 8.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-7577 or the next vulnerability affects your stack