CVE:CVE-2019-19281
CNNVD:CNNVD-202002-590
Siemens SIMATIC S7-1500 CPU family是德国西门子（Siemens）公司的一款S7-1500系列的中央处理单元。
Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2、SIMATIC S7-1500 CPU系列和SIMATIC S7-1500 Software Controller中存在资源管理错误漏洞。攻击者可借助特制的UDP数据包利用该漏洞导致拒绝服务。以下产品及版本受到影响：Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2(包括 SIPLUS variants)(全部版本)、SIMATIC S7-1500 CPU系列v2.5及之后版本(v2.8版本已修复)(包括相关的ET200 CPUs和SIPLUS variants)；SIMATIC S7-1500 Software Controller v2.5及之后版本(v20.8版本已修复)。
solution:Upgrade siemens simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware to a higher version than 20.8,and avoid the version [2.5,20.8); Upgrade siemens simatic_s7-1500_cpu_1511-1_pn_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1513-1_pn_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1515-2_pn_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1516-3_pn_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1516-3_dp_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1517-3_pn_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1517-3_dp_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1518-4_pn_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1518-4_dp_firmware to a higher version than 2.8,and avoid the version [2.5,2.8); Upgrade siemens simatic_s7-1500_cpu_1507s_firmware to a higher version than 20.8,and avoid the version [2.5,20.8); Upgrade siemens simatic_s7-1500_cpu_1508s_firmware to a higher version than 20.8,and avoid the version [2.5,20.8); Upgrade siemens simatic_s7-1500_cpu_1507s_f_firmware to a higher version than 20.8,and avoid the version [2.5,20.8); Upgrade siemens simatic_s7-1500_cpu_1508s_f_firmware to a higher version than 20.8,and avoid the version [2.5,20.8)