Siemens Sinumerik Operate vulnerabilities

2 CVEs affecting Siemens Sinumerik Operate, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7580, published 2020-06-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2685, published 2017-03-01. High severity, CVSS 7.4. EPSS: 1% chance of exploitation in the next 30 days. Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow…
CVE-2020-7580, published 2020-06-10. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions),…