CVE:CVE-2019-6568
CNNVD:CNNVD-201904-458
Siemens SIMATIC S7-1500 CPU是德国西门子（Siemens）公司的一款CPU（中央处理器）模块。
Siemens SIMATIC S7-1500 CPU 存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。以下产品及版本受到影响：Siemens SIMATIC S7-1500 CPU family（相关的ET200 CPUs和SIPLUS variants）；SIMATIC NET CP 1604（全部版本）；SIMATIC NET CP 1616（全部版本）；SIMATIC NET CP 343-1 Advanced（SIPLUS variants）；SIMATIC CP443-1（SIPLUS variants）；SIMATIC CP443-1 Advanced（SIPLUS variants）；SIMATIC CP443-1 OPC UA（全部版本）；SIMATIC ET 200SP Open Controller CPU 1515SP PC（SIPLUS variants）；SIMATIC ET 200SP Open Controller CPU 1515SP PC2（SIPLUS variants）等。
solution:Upgrade siemens cp1604_firmware to a higher version than *; Upgrade siemens cp1616_firmware to a higher version than *; Upgrade siemens simatic_rf185c_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0); Upgrade siemens simatic_cp343-1_advanced_firmware to a higher version than *; Upgrade siemens simatic_cp443-1_firmware to a higher version than *; Upgrade siemens simatic_cp443-1_advanced_firmware to a higher version than *; Upgrade siemens simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware to a higher version than 2.1.6,and avoid the version (,2.1.6); Upgrade siemens simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens simatic_hmi_comfort_outdoor_panels_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmware to a higher version than 15.1,15.1,and avoid the version (,15.1),15.1; Upgrade siemens simatic_cp443-1_opc_ua to a higher version than *; Upgrade siemens simatic_ipc_diagmonitor to a higher version than 5.1.3,and avoid the version (,5.1.3); Upgrade siemens simatic_s7-1500_software_controller to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens simatic_s7-plcsim_advanced to a higher version than 2.0,2.0,2.0:sp1,and avoid the version (,2.0),2.0,2.0:sp1; Upgrade siemens simatic_wincc_runtime_advanced to a higher version than 15.1,15.1,15.1:update1,15.1:update2,15.1:update3,and avoid the version (,15.1),15.1,15.1:update1,15.1:update2,15.1:update3; Upgrade siemens sitop_manager to a higher version than 1.1,and avoid the version (,1.1); Upgrade siemens simatic_rf600r_firmware to a higher version than 3.2.1,and avoid the version (,3.2.1); Upgrade siemens simatic_rf188c_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0); Upgrade siemens simatic_rf186c_firmware to a higher version than 1.1.0,and avoid the version (,1.1.0); Upgrade siemens simatic_rf182c_firmware to a higher version than *; Upgrade siemens simatic_rf181-eip_firmware to a higher version than *; Upgrade siemens simatic_s7-1500_firmware to a higher version than 2.6.1,and avoid the version (,2.6.1); Upgrade siemens simatic_s7-300_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-400_pn_firmware to a higher version than *; Upgrade siemens simatic_s7-400_pn/dp_firmware to a higher version than *; Upgrade siemens simatic_teleservice_adapter_ie_advanced_firmware to a higher version than *; Upgrade siemens simatic_teleservice_adapter_ie_basic_firmware to a higher version than *; Upgrade siemens simatic_teleservice_adapter_ie_standard_firmware to a higher version than *; Upgrade siemens simatic_winac_rtx_firmware to a higher version than 2010,2010,and avoid the version (,2010),2010; Upgrade siemens simocode_pro_v_eip_firmware to a higher version than 1.1.3,and avoid the version (,1.1.3); Upgrade siemens simocode_pro_v_pn_firmware to a higher version than 2.1.3,and avoid the version (,2.1.3); Upgrade siemens sinamics_g130_firmware to a higher version than 5.2,and avoid the version (,5.2); Upgrade siemens sinamics_g150_firmware to a higher version than 5.2,and avoid the version (,5.2); Upgrade siemens sinamics_s120_firmware to a higher version than 5.2,and avoid the version (,5.2); Upgrade siemens sinamics_s150_firmware to a higher version than 5.1,5.1,5.1:sp1,5.1:sp1_hotfix2,and avoid the version (,5.1),5.1,5.1:sp1,5.1:sp1_hotfix2; Upgrade siemens sinamics_s210_firmware to a higher version than 5.1,5.1,5.1:sp1,and avoid the version (,5.1),5.1,5.1:sp1; Upgrade siemens sitop_psu8600_firmware to a higher version than 1.5,and avoid the version (,1.5); Upgrade siemens sitop_ups1600_firmware to a higher version than 2.3,and avoid the version (,2.3); Upgrade siemens tim_1531_irc_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_s7-1500f_firmware to a higher version than 2.6.1,and avoid the version (,2.6.1); Upgrade siemens simatic_s7-1500s_firmware to a higher version than 2.6.1,and avoid the version (,2.6.1); Upgrade siemens simatic_s7-1500t_firmware to a higher version than 2.6.1,and avoid the version (,2.6.1); Upgrade siemens sinamics_gh150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_gl150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_gm150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_sl150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_sm120_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_sm150_firmware to a higher version than 5.1,5.1,and avoid the version (,5.1),5.1