Buffer Overflow Vulnerability in SIMATIC PCS 7 and Related Siemens Products

CVE-2020-7586

What is CVE-2020-7586?

A buffer overflow vulnerability exists in multiple versions of the SIMATIC PCS 7, SIMATIC PDM, SIMATIC STEP 7, and SINAMICS STARTER products by Siemens. This flaw potentially allows a local attacker to induce a Denial-of-Service condition, harming the system's availability. Exploitation necessitates local access and user privileges without requiring further user interaction. The implications of such an attack could result in not only unavailability but also unauthorized access to confidential information on the compromised system.

References