CVE:CVE-2018-4843
CNNVD:CNNVD-201803-723
Siemens SIMATIC CP 343-1 Advanced是德国西门子（Siemens）公司的一款用于支持PROFINET（新一代基于工业以太网技术的自动化总线标准）的以太网通讯模块。
多款Siemens产品中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。以下产品及版本受到影响：Siemens SIMATIC CP 343-1 Advanced，SIMATIC CP 343-1 Standard，SIMATIC CP 443-1 Advanced，SIMATIC CP 443-1 Standard，SIMATIC S7-1500等。
solution:Upgrade siemens simatic_cp_343-1_firmware to a higher version than -; Upgrade siemens simatic_cp_443-1_firmware to a higher version than -; Upgrade siemens simatic_s7-1500_firmware to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade siemens simatic_s7-300_firmware to a higher version than -; Upgrade siemens simatic_s7-400_h_v6_firmware to a higher version than -; Upgrade siemens simatic_s7-400_pn/dp_v6_firmware to a higher version than 6.0.7,and avoid the version (,6.0.7); Upgrade siemens simatic_s7-400_pn/dp_v7_firmware to a higher version than -; Upgrade siemens simatic_s7-410_firmware to a higher version than 8.1,and avoid the version (,8.1); Upgrade siemens simatic_winac_rtx_2010_firmware to a higher version than -; Upgrade siemens sinumerik_828d_firmware to a higher version than -; Upgrade siemens softnet_pn-io_linux_firmware to a higher version than -