CVE-2020-7581

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-14 · updated 2026-06-17
Weakness: CWE-428

Description

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1). A component within the affected application calls a helper binary with SYSTEM privileges during startup while the call path is not quoted. This could allow a local attacker with administrative privileges to execute code with SYSTEM level privileges.

Affected products

Siemens Opcenter Execution Discrete: before 3.2 — fixed in 3.2
Siemens Opcenter Execution Foundation: before 3.2 — fixed in 3.2
Siemens Opcenter Execution Process: before 3.2 — fixed in 3.2
Siemens Opcenter Intelligence: all versions
Siemens Opcenter Quality: before 11.3 — fixed in 11.3
Siemens Opcenter RD&L: 8.0
Siemens Simatic Notifier Server: all versions
Siemens SIMATIC PCS neo: all versions
Siemens SIMATIC STEP 7 (TIA Portal): before 16; 16, 16-update1 — fixed in 16
Siemens Simocode Es: all versions
Siemens Soft Starter Es: all versions

How to fix

Upgrade to a fixed version: Siemens Opcenter Execution Discrete 3.2; Siemens Opcenter Execution Foundation 3.2; Siemens Opcenter Execution Process 3.2; Siemens Opcenter Quality 11.3; Siemens SIMATIC STEP 7 (TIA Portal) 16. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-7581 or the next vulnerability affects your stack