CVE:CVE-2020-28388
CNNVD:CNNVD-202102-881
Siemens TALON Series是德国西门子（Siemens）公司的一个开放系统。使控制器和应用程序在单个平台上运行，同时彼此互操作。
Siemens产品中存在安全漏洞，该漏洞源于该产品的TCP连接的初始序列号（ISN）是从一个不够随机的源中派生出来的。因此，可以预测当前和未来TCP连接的ISN。攻击者可以劫持现有会话或欺骗未来会话
solution:Upgrade siemens capital_vstar to a higher version than *; Upgrade siemens nucleus_net to a higher version than 5.2,and avoid the version (,5.2); Upgrade siemens nucleus_source_code to a higher version than *; Upgrade siemens pluscontrol_1st_gen to a higher version than *; Upgrade siemens nucleus_readystart to a higher version than 2012.12,and avoid the version (,2012.12)