CVE-2020-7588 : Security Advisory and Response

A vulnerability has been identified in various Siemens products, including Opcenter Execution Discrete, Opcenter Execution Foundation, Opcenter Execution Process, Opcenter Intelligence, Opcenter Quality, Opcenter RD&L, SIMATIC IT LMS, SIMATIC IT Production Suite, SIMATIC Notifier Server for Windows, SIMATIC PCS neo, SIMATIC STEP 7 (TIA Portal) V15, SIMATIC STEP 7 (TIA Portal) V16, SIMOCODE ES V15.1, SIMOCODE ES V16, Soft Starter ES V15.1, and Soft Starter ES V16. Exploiting this vulnerability could lead to a partial remote denial-of-service.

Understanding CVE-2020-7588

This CVE affects multiple Siemens products, potentially allowing for a remote denial-of-service attack.

What is CVE-2020-7588?

CVE-2020-7588 is a vulnerability found in various Siemens products that could be exploited by sending a specially crafted packet to the affected service, resulting in a partial remote denial-of-service.

The Impact of CVE-2020-7588

The vulnerability could cause the affected service to restart itself, leading to a partial remote denial-of-service.

Technical Details of CVE-2020-7588

This section provides more technical insights into the vulnerability.

Vulnerability Description

The vulnerability exists in multiple Siemens products due to improper input validation, allowing for a partial remote denial-of-service attack.

Affected Systems and Versions

Opcenter Execution Discrete: All versions < V3.2
Opcenter Execution Foundation: All versions < V3.2
Opcenter Execution Process: All versions < V3.2
Opcenter Intelligence: All versions < V3.3
Opcenter Quality: All versions < V11.3
Opcenter RD&L: V8.0
SIMATIC IT LMS: All versions < V2.6
SIMATIC IT Production Suite: All versions < V8.0
SIMATIC Notifier Server for Windows: All versions
SIMATIC PCS neo: All versions < V3.0 SP1
SIMATIC STEP 7 (TIA Portal) V15: All versions < V15.1 Update 5
SIMATIC STEP 7 (TIA Portal) V16: All versions < V16 Update 2
SIMOCODE ES V15.1: All versions < V15.1 Update 4
SIMOCODE ES V16: All versions < V16 Update 1
Soft Starter ES V15.1: All versions < V15.1 Update 3
Soft Starter ES V16: All versions < V16 Update 1

Exploitation Mechanism

Sending a specially crafted packet to the affected service could trigger the vulnerability, resulting in a partial remote denial-of-service.

Mitigation and Prevention

Protect your systems from CVE-2020-7588 with the following steps:

Immediate Steps to Take

Apply vendor-supplied patches or updates promptly.
Monitor vendor communications for security advisories.
Implement network segmentation to limit exposure.

Long-Term Security Practices

Regularly update and patch all software and firmware.
Conduct security assessments and penetration testing.
Educate users on safe computing practices.

Patching and Updates

Ensure all affected systems are updated with the latest patches provided by Siemens to mitigate the vulnerability.