CVE:CVE-2018-13814
CNNVD:CNNVD-201811-488
Siemens SIMATIC Panels和SIMATIC WinCC（TIA Portal）都是德国西门子（Siemens）公司的产品。Siemens SIMATIC Panels是一款人机界面面板。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。
Siemens SIMATIC Panels和SIMATIC WinCC (TIA Portal)中存在代码注入漏洞。攻击者可借助恶意的链接利用该漏洞注入HTTP包头。以下产品和版本受到影响：Siemens SIMATIC HMI Comfort Panels 4" - 22" 14之前版本；SIMATIC HMI Comfort Outdoor Panels 7"和15" 14之前版本；SIMATIC HMI KTP Mobile Panels KTP400F 14之前版本，KTP700 14之前版本，KTP700F 14之前版本，KTP900 und KTP900F 14之前版本；SIMATIC WinCC Runtime Advanced 14之前版本；SIMATIC WinCC Runtime Professional 14之前版本；SIMATIC WinCC (TIA Portal)14之前版本；SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)。
solution:Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_comfort_outdoor_panels_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmware to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_wincc_(tia_portal) to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_wincc_runtime to a higher version than 14.0,and avoid the version (,14.0); Upgrade siemens simatic_hmi_tp_firmware to a higher version than *; Upgrade siemens simatic_hmi_mp_firmware to a higher version than *; Upgrade siemens simatic_hmi_op_firmware to a higher version than *