01 Record

CVE-2020-7580

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions),

UnratedPUBLISHEDCNA: siemens

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions),

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.46% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 39.5% of scored records. A rank, not a probability.
NVD base score: 6.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2020-06-10 00:00Z6 YR AGO

Last updated

2024-08-04 09:33Z2 YR AGO

Reserved

2020-01-21

Assigning CNA

siemens

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-428Unquoted Search Path or ElementBase

Data version

5.1

Document digest

963dc18027f5cfc83f940410fe6e090dcde3410e834ce0909df0c84702f276fb

05 Affected products

VendorProductVersionsPlatforms

SiemensSIMATIC Automation ToolAll versions < V4 SP2—

SiemensSIMATIC NET PC Software V14All versions < V14 SP1 Update 14—

SiemensSIMATIC NET PC Software V15All versions—

SiemensSIMATIC NET PC Software V16All versions < V16 Upd3—

SiemensSIMATIC PCS neoAll versions < V3.0 SP1—

SiemensSIMATIC ProSaveAll versions < V17—

SiemensSIMATIC S7-1500 Software ControllerAll versions < V21.8—

SiemensSIMATIC STEP 7 (TIA Portal) V13All versions < V13 SP2 Update 4—

SiemensSIMATIC STEP 7 (TIA Portal) V14All versions < V14 SP1 Update 10—

SiemensSIMATIC STEP 7 (TIA Portal) V15All versions < V15.1 Update 5—

SiemensSIMATIC STEP 7 (TIA Portal) V16All versions < V16 Update 2—

SiemensSIMATIC STEP 7 V5All versions < V5.6 SP2 HF3—

SiemensSIMATIC WinCC OA V3.16All versions < V3.16 P018—

SiemensSIMATIC WinCC OA V3.17All versions < V3.17 P003—

SiemensSIMATIC WinCC Runtime AdvancedAll versions < V16 Update 2—

SiemensSIMATIC WinCC Runtime Professional V13All versions < V13 SP2 Update 4—

SiemensSIMATIC WinCC Runtime Professional V14All versions < V14 SP1 Update 10—

SiemensSIMATIC WinCC Runtime Professional V15All versions < V15.1 Update 5—

SiemensSIMATIC WinCC Runtime Professional V16All versions < V16 Update 2—

SiemensSIMATIC WinCC V7.4All versions < V7.4 SP1 Update 14—

SiemensSIMATIC WinCC V7.5All versions < V7.5 SP1 Update 3—

SiemensSINAMICS STARTERAll Versions < V5.4 HF2—

SiemensSINAMICS StartdriveAll Versions < V16 Update 3—

SiemensSINEC NMSAll versions < V1.0 SP2—

SiemensSINEMA ServerAll versions < V14 SP3—

SiemensSINUMERIK ONE virtualAll Versions < V6.14—

SiemensSINUMERIK OperateAll Versions < V6.14—

06 References

cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-312271.pdf
us-cert.cisa.govhttps://us-cert.cisa.gov/ics/advisories/icsa-20-161-04