CVE:CVE-2020-7588
CNNVD:CNNVD-202007-580
Siemens Opcenter是德国西门子（Siemens）公司的一款用于工业实现实施到制造商实现全面数字化的一整套软件方案。
Siemens Opcenter 多款产品存在输入验证错误漏洞，该漏洞源于将特制数据包发送到受影响的服务可能会导致部分远程拒绝服务，这将导致服务自行重启。以下产品及版本受到影响：Opcenter Execution Discrete 3.2之前版本, Opcenter Execution Foundation 3.2之前版本, Opcenter Execution Process 3.2之前版本, Opcenter Intelligence 所有版本, Opcenter Quality 11.3之前版本, Opcenter RD&L 8.0版本, SIMATIC IT LMS 所有版本, SIMATIC IT Production Suite 所有版本, SIMATIC Notifier Server for Windows 所有版本, SIMATIC PCS neo  V3.0 SP1之前版本, SIMATIC STEP 7 (TIA Portal) V15 V15.1 Update 5之前版本, SIMATIC STEP 7 (TIA Portal) V16 V16 Update 2之前版本, SIMOCODE ES V16 Update 1之前版本, Soft Starter ES 所有版本。
solution:Upgrade siemens opcenter_execution_discrete to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens opcenter_execution_foundation to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens opcenter_execution_process to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens opcenter_intelligence to a higher version than *; Upgrade siemens opcenter_quality to a higher version than 11.3,and avoid the version (,11.3); Upgrade siemens opcenter_rd&l to a higher version than 8.0,and avoid the version 8.0; Upgrade siemens simatic_it_lms to a higher version than *; Upgrade siemens simatic_it_production_suite to a higher version than *; Upgrade siemens simatic_notifier_server to a higher version than *; Upgrade siemens simatic_pcs_neo to a higher version than *; Upgrade siemens simatic_step_7 to a higher version than 15.1,16,16:update_1,and avoid the version [15,15.1],16,16:update_1; Upgrade siemens simocode_es to a higher version than *; Upgrade siemens soft_starter_es to a higher version than *