VDB

CNVD-2022-36387

CNVD-2022-36387 PUBLISHED

SIMATIC PCS 7是一套过程控制系统。SIMATIC WinCC是一套自动化的数据采集与监控(SCADA)系统。SIMATIC WinCC Runtime Professional是一个可视化运行平台,用于操作员控制和监控机器和设备。 Siemens SIMATIC WinCC Kiosk Mode存在安全漏洞,如果没有安装打印机,经过身份验证的攻击者可利用漏洞通过在受影响的应用程序中打开打印机对话框来逃脱WinCC Kiosk模式。

Affected Products

VendorProductVersions
SIEMENS SIMATIC WinCC <=V7.4
SIEMENS SIMATIC PCS 7 V9.1
SIEMENS SIMATIC PCS 7 <=V9.0
Siemens SIMATIC WinCC < V7.5 SP2 Update 8
SIEMENS SIMATIC WinCC Runtime Professional V17
SIEMENS SIMATIC WinCC Runtime Professional <=V16

Timeline

  • May 11, 2022 CVE ID Reserved
  • May 12, 2022 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›