CVE:CVE-2019-19282
CNNVD:CNNVD-202002-592
Siemens SIMATIC PCS 7是德国西门子（Siemens）公司的一套过程控制系统。
SIMATIC WinCC 中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。以下产品及版本受到影响：SIMATIC WinCC V7.3（所有版本），SIMATIC WinCC V7.4（所有版本低于V7.4 SP1 Update 14），SIMATIC WinCC V7.5（所有版本低于V7.5 SP1 Update 1）。
solution:Upgrade siemens openpcs_7 to a higher version than 9.0,9.0_update_1,and avoid the version 9.0,9.0_update_1; Upgrade siemens simatic_batch to a higher version than 9.0,9.0:sp1,9.0:sp1_update_1,9.0:sp1_update_2,9.0:sp1_update_3,9.0:sp1_update_4,and avoid the version 9.0,9.0:sp1,9.0:sp1_update_1,9.0:sp1_update_2,9.0:sp1_update_3,9.0:sp1_update_4; Upgrade siemens simatic_net_pc to a higher version than 16,16,and avoid the version (,16),16; Upgrade siemens simatic_pcs_7 to a higher version than 8.1,8.2,9.0,9.0:sp1,9.0:sp2,and avoid the version 8.1,8.2,9.0,9.0:sp1,9.0:sp2; Upgrade siemens simatic_route_control to a higher version than 9.0,9.0,and avoid the version (,9.0),9.0; Upgrade siemens simatic_wincc to a higher version than 7.4,7.4:sp1,7.4:sp1_update_1,7.4:sp1_update_10,7.4:sp1_update_11,7.4:sp1_update_12,7.4:sp1_update_13,7.4:sp1_update_2,7.4:sp1_update_3,7.4:sp1_update_4,7.4:sp1_update_5,7.4:sp1_update_6,7.4:sp1_update_7,7.4:sp1_update_8,7.4:sp1_update_9,7.5,7.5:sp1,7.5.1,13,13:sp1,14.0.1,15.1,15.1:update_1,15.1:update_2,15.1:update_3,15.1:update_4,16,and avoid the version 7.4,7.4:sp1,7.4:sp1_update_1,7.4:sp1_update_10,7.4:sp1_update_11,7.4:sp1_update_12,7.4:sp1_update_13,7.4:sp1_update_2,7.4:sp1_update_3,7.4:sp1_update_4,7.4:sp1_update_5,7.4:sp1_update_6,7.4:sp1_update_7,7.4:sp1_update_8,7.4:sp1_update_9,7.5,7.5:sp1,7.5.1,13,13:sp1,14.0.1,15.1,15.1:update_1,15.1:update_2,15.1:update_3,15.1:update_4,16