CVE:CVE-2018-4858
CNNVD:CNNVD-201807-480
Siemens IEC 61850 system configurator等都是德国西门子（Siemens）公司的产品。Siemens IEC 61850 system configurator是一款用于智能变电站的系统配置器；DIGSI是一套用于Siemens保护和测控系统的统一配置软件。
多款Siemens产品中存在安全漏洞。攻击者可利用该漏洞窃取系统数据或以操作系统用户权限执行代码。以下产品和版本受到影响：Siemens IEC 61850系统配置器5.80之前版本；DIGSI 5 7.80之前版本（因含有IEC 61850系统配置器而受影响）；DIGSI 4（所有版本）；SICAM PAS/PQS 8.11之前版本；SICAM PQ分析器3.11之前版本；SICAM SCC（所有版本）。
solution:Upgrade siemens ec_61850_system_configurator_firmware to a higher version than 5.80,and avoid the version (,5.80); Upgrade siemens sicam_pas/pqs_firmware to a higher version than 8.11,and avoid the version (,8.11); Upgrade siemens sicam_pq_analyzer_firmware to a higher version than 3.11,and avoid the version (,3.11); Upgrade siemens sicam_scc_firmware to a higher version than -; Upgrade siemens digsi_4_firmware to a higher version than -; Upgrade siemens digsi_5_firmware to a higher version than 7.80,and avoid the version (,7.80)