CVE:CVE-2015-7911
CNNVD:CNNVD-201512-006
Saia Burgess Controls PCD等都是瑞士Saia Burgess Controls公司用于测量、调节和控制任务的可编程控制器系列产品。
多款Saia Burgess Controls设备中存在安全漏洞，该漏洞源于程序使用硬编码的证书。远程攻击者可借助FTP会话利用该漏洞获取管理员访问权限。以下产品及版本受到影响：Saia Burgess Controls PCD7.D4xxxT5F，PCD7.D4xxV，PCD7.D4xxD，PCD7.D4xxWTPF，PCD7.D4xxxT5F，PCD7.D4xxV VGA MB Panels，PCD7.D4xxD SVGA MB Panels，PCD7.D4xxWTPF WVGA MB Panels 1.24.41及之前版本；PCD3.T665，PCD3.T666 1.24.30及之前版本；PCD1.M0xx0/M2xx0，PCD2.M5xx0，PCD3.Mxxx0，PCD3.Mxx60 1.24.25及之前版本。
solution:Upgrade saia_burgess_controls pcd7.d4xxv_vga_mb_firmware to a higher version than 1.24.41,and avoid the version (,1.24.41]; Upgrade saia_burgess_controls pcd7.d4xxd_firmware to a higher version than 1.24.41,and avoid the version (,1.24.41]; Upgrade saia_burgess_controls pcd3.mxxx0_firmware to a higher version than 1.24.25,and avoid the version (,1.24.25]; Upgrade saia_burgess_controls pcd7.d4xxd_svga_mb_firmware to a higher version than 1.24.41,and avoid the version (,1.24.41]; Upgrade saia_burgess_controls pcd3.t666_firmware to a higher version than 1.24.30,and avoid the version (,1.24.30]; Upgrade saia_burgess_controls pcd1.m2xx0_firmware to a higher version than 1.24.25,and avoid the version (,1.24.25]; Upgrade saia_burgess_controls pcd3.mxx60_firmware to a higher version than 1.24.25,and avoid the version (,1.24.25]; Upgrade saia_burgess_controls pcd3.t665_firmware to a higher version than 1.24.30,and avoid the version (,1.24.30]; Upgrade saia_burgess_controls pcd2.m5xx0_firmware to a higher version than 1.24.25,and avoid the version (,1.24.25]; Upgrade saia_burgess_controls pcd7.d4xxwtpf_wvga_mb_firmware to a higher version than 1.24.41,and avoid the version 1.24.41; Upgrade saia_burgess_controls pcd7.d4xxwtpf_firmware to a higher version than 1.24.41,and avoid the version (,1.24.41]; Upgrade saia_burgess_controls pcd1.m0xx0_firmware to a higher version than 1.24.25,and avoid the version (,1.24.25]; Upgrade saia_burgess_controls pcd7.d4xxxt5f_firmware to a higher version than 1.24.41,and avoid the version (,1.24.41]; Upgrade saia_burgess_controls pcd7.d4xxv_firmware to a higher version than 1.24.41,and avoid the version (,1.24.41]