Siemens SIMATIC PCS 7 heap-based overflow

Summaryinfo

A vulnerability, which was classified as critical, was found in Siemens SIMATIC PCS 7, SIMATIC PDM, SIMATIC STEP 7 and SINAMICS STARTER. The affected element is an unknown function. Such manipulation leads to heap-based overflow. This vulnerability is documented as CVE-2020-7586. The attack needs to be performed locally. There is not any exploit available. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability was found in Siemens SIMATIC PCS 7, SIMATIC PDM, SIMATIC STEP 7 and SINAMICS STARTER (SCADA Software) (affected version not known). It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation with an unknown input leads to a heap-based overflow vulnerability. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Impacted is confidentiality, integrity, and availability. CVE summarizes:

A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC PDM (All versions), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF1). A buffer overflow vulnerability could allow a local attacker to cause a Denial-of-Service situation. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.

The weakness was released 06/10/2020. This vulnerability is handled as CVE-2020-7586 since 01/21/2020. The attack needs to be approached locally. A simple authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

Applying a patch is able to eliminate this problem.

Entry connected to this vulnerability is available at VDB-156535. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• SCADA Software

Vendor

• Siemens

Name

• SIMATIC PCS 7
• SIMATIC PDM
• SIMATIC STEP 7
• SINAMICS STARTER

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion