Skip to content
Fencer Intel
high 7.8

CVE-2020-7585 json

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC…

published 6y ago modified 4mo ago also EUVD-2020-28710

cvss
7.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.5%
EPSS 0.5% chance of exploitation in 30 days, percentile 39%
public exploits
0
none known

Summary

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges. The security vulnerability could be exploited by an attacker with local access to the affected systems. Successful exploitation requires user privileges but no user interaction. The vulnerability could allow an attacker to compromise the availability of the system as well as to have access to confidential information.

Patch / fix

  • siemens simatic_step_7 5.6
  • siemens sinamics_starter 5.4

Is CVE-2020-7585 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-20-161-05 updated cvss 7.8

Siemens SIMATIC, SINAMICS (Update C)

  • Siemens SIMATIC PCS 7 V8.2 and earlier
    affected: vendor fix, mitigation
  • Siemens SIMATIC PCS 7 V9.0 <V9.0_SP3
    affected: fixed in V9.0, mitigation
  • Siemens SIMATIC PDM <V9.2
    affected: fixed in V9.2, mitigation support.industry.siemens.com
  • Siemens SIMATIC STEP 7 V5.X <V5.6_SP2_HF3
    affected: fixed in V5.6, mitigation support.industry.siemens.com
  • Siemens SINAMICS STARTER (containing STEP 7 OEM version) <V5.4_HF2
    affected: fixed in V5.4, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

0.45% chance of exploitation in the next 30 days, higher than 39% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • Siemens SIMATIC PCS 7 V8.2 and earlier
  • Siemens SIMATIC PCS 7 V9.0
  • Siemens SIMATIC PDM
  • Siemens SIMATIC STEP 7 V5.X
  • Siemens SINAMICS STARTER (containing STEP 7 OEM version)

Classification

Weakness
  • CWE-427 Uncontrolled Search Path Element

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.