CVE:CVE-2020-15786
CNNVD:CNNVD-202009-498
Siemens SIMATIC HMI/WinCC是德国Siemens公司的一个工控软件。提供一个让工控设备可视化功能。
Siemens 存在安全漏洞，该漏洞源于SIMATIC HIMI，攻击者可利用该漏洞提升权限。
solution:Upgrade siemens simatic_hmi_basic_panels_2nd_generation_firmware to a higher version than 14,and avoid the version (,14]; Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than *; Upgrade siemens simatic_hmi_mobile_panels_firmware to a higher version than *; Upgrade siemens simatic_hmi_united_comfort_panels_firmware to a higher version than *