Siemens SIMATIC Prosave vulnerabilities

2 CVEs affecting Siemens SIMATIC Prosave, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7580, published 2020-06-10.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7580, published 2020-06-10. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions),…
• CVE-2015-1594, published 2015-03-07. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Siemens SIMATIC ProSave before 13 SP1; SIMATIC CFC before 8.0 SP4 Upd9 and 8.1 before Upd1; SIMATIC STEP 7 before 5.5 SP1 HF2, 5.5 SP2 before HF7, 5.5 SP3, and…