CVE:CVE-2020-7581
CNNVD:CNNVD-202007-574
Siemens Opcenter是德国西门子（Siemens）公司的一款用于工业实现实施到制造商实现全面数字化的一整套软件方案。
Siemens Opcenter 多款产品存在代码问题漏洞，该漏洞源于受影响的应用程序中的组件在启动期间会调用具有SYSTEM特权的辅助二进制文件，而不会引用调用路径。以下产品及版本受到影响：Opcenter Execution Discrete 3.2之前版本, Opcenter Execution Foundation 3.2之前版本, Opcenter Execution Process 3.2之前版本, Opcenter Intelligence 所有版本, Opcenter Quality 11.3之前版本, Opcenter RD&L 8.0版本, SIMATIC IT LMS 所有版本, SIMATIC IT Production Suite 所有版本, SIMATIC Notifier Server for Windows 所有版本, SIMATIC PCS neo  V3.0 SP1之前版本, SIMATIC STEP 7 (TIA Portal) V15 V15.1 Update 5之前版本, SIMATIC STEP 7 (TIA Portal) V16 V16 Update 2之前版本, SIMOCODE ES V16 Update 1之前版本, Soft Starter ES 所有版本。
solution:Upgrade siemens opcenter_execution_discrete to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens opcenter_execution_foundation to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens opcenter_execution_process to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens opcenter_intelligence to a higher version than *; Upgrade siemens opcenter_quality to a higher version than 11.3,and avoid the version (,11.3); Upgrade siemens opcenter_rd&l to a higher version than 8.0,and avoid the version 8.0; Upgrade siemens simatic_notifier_server to a higher version than *; Upgrade siemens simatic_pcs_neo to a higher version than *; Upgrade siemens simatic_step_7 to a higher version than 16,16,16:update1,and avoid the version (,16),16,16:update1; Upgrade siemens simocode_es to a higher version than *; Upgrade siemens soft_starter_es to a higher version than *