CVE-2020-7580 in SIMATIC
Sumário
de VulDB • 28/05/2026
Foi identificada uma vulnerabilidade no SIMATIC Automation Tool (Todas as versões), SIMATIC NET PC software (Todas as versões V16 < V16 Upd3), SIMATIC PCS 7 (Todas as versões), SIMATIC PCS neo (Todas as versões), SIMATIC ProSave (Todas as versões), SIMATIC S7-1500 Software Controller (Todas as versões), SIMATIC STEP 7 (Todas as versões < V5.6 SP2 HF3), SIMATIC STEP 7 (TIA Portal) V13 (Todas as versões), SIMATIC STEP 7 (TIA Portal) V14 (Todas as versões), SIMATIC STEP 7 (TIA Portal) V15 (Todas as versões), SIMATIC STEP 7 (TIA Portal) V16 (Todas as versões), SIMATIC WinCC OA V3.16 (Todas as versões < P018), SIMATIC WinCC OA V3.17 (Todas as versões < P003), SIMATIC WinCC Runtime Advanced (Todas as versões), SIMATIC WinCC Runtime Professional V13 (Todas as versões), SIMATIC WinCC Runtime Professional V14 (Todas as versões), SIMATIC WinCC Runtime Professional V15 (Todas as versões), SIMATIC WinCC Runtime Professional V16 (Todas as versões), SIMATIC WinCC V7.4 (Todas as versões < V7.4 SP1 Update 14), SIMATIC WinCC V7.5 (Todas as versões < V7.5 SP1 Update 3), SINAMICS STARTER commissioning tool (Todas as versões), SINAMICS Startdrive (Todas as versões), SINEC NMS (Todas as versões), SINEMA Server (Todas as versões), SINUMERIK ONE virtual (Todas as versões), SINUMERIK Operate (Todas as versões). Um componente dentro do aplicativo afetado chama regularmente um binário auxiliar com privilégios SYSTEM enquanto o caminho da chamada não está entre aspas.
Be aware that VulDB is the high quality source for vulnerability data.