VDB
CNVD-2019-22244
CNVD-2019-22244
PUBLISHED
Siemens SIMATIC PCS 7和SIMATIC WinCC都是德国西门子（Siemens）公司的产品。SIMATIC PCS 7是一套过程控制系统。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。SIMATIC WinCC DataMonitor web是其中的一个数据分析和显示组件。 多款Siemens产品中的SIMATIC WinCC DataMonitor web存在安全漏洞。攻击者可利用该漏洞上传任意的ASPX代码。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SIEMENS SIMATIC WinCC Runtime Professional V15 | ||
| SIEMENS SIMATIC WinCC Runtime Professional V14 | ||
| Siemens SIMATIC WinCC <=V7.2 | ||
| SIEMENS SIMATIC PCS 7 <=V8.0 | ||
| SIEMENS SIMATIC WinCC Runtime Professional V13 | ||
| Siemens SIMATIC WinCC Professional (TIA Portal V13) | ||
| SIEMENS SIMATIC WinCC V7.3 | ||
| SIEMENS SIMATIC PCS 7 V8.1 | ||
| SIEMENS SIMATIC PCS 7 V9.0 | ||
| Siemens SIMATIC WinCC Professional (TIA Portal V14) | ||
| Siemens SIMATIC WinCC Professional (TIA Portal V15) | ||
| Siemens SIMATIC WinCC V7.5 | ||
| SIEMENS SIMATIC PCS 7 V8.0 | ||
| SIEMENS SIMATIC WinCC V7.4 |
Timeline
- Jul 10, 2019 CVE ID Reserved
- Jul 12, 2019 CVE Published