CVE:CVE-2020-25242
CNNVD:CNNVD-202105-615
Siemens SIMATIC是西门子（Siemens）的一款组态软件。
多款Siemens设备存在资源管理错误漏洞。攻击者可能发送特制的数据包，从而在TCP端口102上导致拒绝服务情况。以下产品及版本受到影响：SIMATIC NET CP 343-1 Advanced (including SIPLUS variants)、SIMATIC NET CP 343-1 Lean (including SIPLUS variants)、SIMATIC NET CP 343-1 Standard (including SIPLUS variants): All versions。
solution:Upgrade siemens simatic_net_cp_343-1_advanced_firmware to a higher version than *; Upgrade siemens simatic_net_cp_343-1_lean_firmware to a higher version than *; Upgrade siemens simatic_net_cp_343-1_standard_firmware to a higher version than *