CVE:CVE-2019-10943
CNNVD:CNNVD-201908-899
Siemens SIMATIC ET200 Open Controller CPU 1515SP PC2是德国西门子（Siemens）公司的一款逻辑控制器。
多款Siemens产品中存在数据伪造问题漏洞。该漏洞源于网络系统或产品未充分验证数据的来源或真实性。攻击者可利用伪造的数据进行攻击。以下产品和版本受到影响：SIMATIC ET 200SP Open Controller CPU。
solution:Upgrade siemens simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware to a higher version than *; Upgrade siemens simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware to a higher version than 20.8,and avoid the version (,20.8); Upgrade siemens simatic_s7-1200_cpu_1211c_firmware to a higher version than 4.4,and avoid the version (,4.4); Upgrade siemens simatic_s7-1200_cpu_1212c_firmware to a higher version than 4.4,and avoid the version (,4.4); Upgrade siemens simatic_s7-1200_cpu_1214c_firmware to a higher version than 4.4,and avoid the version (,4.4); Upgrade siemens simatic_s7-1200_cpu_1215c_firmware to a higher version than 4.4,and avoid the version (,4.4); Upgrade siemens simatic_s7-1200_cpu_1217c_firmware to a higher version than 4.4,and avoid the version (,4.4); Upgrade siemens simatic_s7-1500_cpu_1518_firmware to a higher version than 2.8.1,and avoid the version (,2.8.1); Upgrade siemens simatic_s7-1500_cpu_1511c_firmware to a higher version than 2.8.1,and avoid the version (,2.8.1); Upgrade siemens simatic_s7-1500_cpu_1512c_firmware to a higher version than 2.8.1,and avoid the version (,2.8.1); Upgrade siemens simatic_s7-1500_software_controller to a higher version than 20.8,and avoid the version (,20.8); Upgrade siemens simatic_s7_plcsim_advanced to a higher version than 3.0,and avoid the version (,3.0)