csirt@kutim:~/threat-intel/cve/CVE-2020-7586

Katalog CVE

CVSS 7.8 · High EPSS 0,42%

Kerentanan Heap-based Buffer Overflow pada siemens simatic pcs 7, siemens simatic process device manager +2 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A buffer overflow vulnerability could allow a local attacker to cause a Denial-of-Service situation. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.

Rincian

Terbit di NVD
10 Juni 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,42% peluang dieksploitasi; lebih tinggi dari 34,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
siemens simatic pcs 7 Semua versi
siemens simatic process device manager Semua versi
siemens simatic step 7 Semua versi sebelum 5.6
siemens simatic step 7 Versi 5.6
siemens simatic step 7 Versi 5.6 sp1
siemens simatic step 7 Versi 5.6 sp2
siemens simatic step 7 Versi 5.6 sp2_hotfix1
siemens sinamics starter Semua versi sebelum 5.4
siemens sinamics starter Versi 5.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.