CVE:CVE-2018-4834
CNNVD:CNNVD-201801-911
Siemens Desigo PXC Series是德国西门子（Siemens）公司的一种新一代楼宇自动化控制器。
Siemens Desigo PXC Series存在代码问题漏洞，该漏洞源于具有设备网络访问权限的远程攻击者可能会在未经事先身份验证的情况下将新固件映像上传到设备。
solution:Upgrade siemens pxc12/22/36-e.d_firmware to a higher version than 6.00.204,and avoid the version (,6.00.204); Upgrade siemens pxc00/50/100/200-e.d_firmware to a higher version than 6.00.204,and avoid the version (,6.00.204); Upgrade siemens pxc00/64/128-u_firmware to a higher version than 6.00.204,and avoid the version (,6.00.204); Upgrade siemens pxc001-e.d_firmware to a higher version than 6.00.204,and avoid the version (,6.00.204); Upgrade siemens pxm20-e_firmware to a higher version than 6.00.204,and avoid the version (,6.00.204)