CVE:CVE-2019-10935
CNNVD:CNNVD-201907-609
Siemens SIMATIC PCS 7和SIMATIC WinCC都是德国西门子（Siemens）公司的产品。SIMATIC PCS 7是一套过程控制系统。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。
Siemens SIMATIC PCS 7和SIMATIC WinCC中存在代码问题漏洞。攻击者可利用该漏洞上传任意的ASPX代码。以下产品及版本受到影响：SIMATIC PCS 7 V8.0及之前版本，SIMATIC PCS 7 V8.1版本，SIMATIC PCS 7 V8.2版本，SIMATIC PCS 7 V9.0版本；SIMATIC WinCC Professional (TIA Portal V13)，SIMATIC WinCC Professional (TIA Portal V14)，SIMATIC WinCC Professional (TIA Portal V15)；SIMATIC WinCC Runtime Professional V13，SIMATIC WinCC Runtime Professional V14，SIMATIC WinCC Runtime Professional V15；SIMATIC WinCC V7.2及之前版本，SIMATIC WinCC V7.3版本，SIMATIC WinCC V7.4版本，SIMATIC WinCC V7.5版本。
solution:Upgrade siemens simatic_pcs_7 to a higher version than 8.0,8.1,8.2,9.0,and avoid the version 8.0,8.1,8.2,9.0; Upgrade siemens simatic_wincc to a higher version than 7.2,7.3,7.3:update_1,7.3:update_10,7.3:update_11,7.3:update_13,7.3:update_4,7.4,7.4:sp1,7.4:update_1,7.5,13,13:sp2,14,14:sp1,15,and avoid the version (,7.2],7.3,7.3:update_1,7.3:update_10,7.3:update_11,7.3:update_13,7.3:update_4,7.4,7.4:sp1,7.4:update_1,7.5,13,13:sp2,14,14:sp1,15; Upgrade siemens simatic_wincc_runtime to a higher version than 13,13:sp1,13:sp2,14,14:sp1,15,15:update_4,15.1,15.1:update_1,and avoid the version 13,13:sp1,13:sp2,14,14:sp1,15,15:update_4,15.1,15.1:update_1