CVE:CVE-2020-15791
CNNVD:CNNVD-202009-508
Siemens SIMATIC是西门子（Siemens）的一款组态软件。
Siemens SIMATIC版本中存在安全漏洞，该漏洞源于可以利用S7-300/S7-400的ISO-TSAP密码。攻击者可利用绕过对数据的访问限制，以获取敏感信息。
solution:Upgrade siemens simatic_s7-300_cpu_312_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_314_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_315-2_dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_315-2_pn_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_317-2_pn_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_317-2_dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_315f-2_dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_315f-2_pn_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_317f-2_pn_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_317f-2_dp_firmware to a higher version than *; Upgrade siemens simatic_s7-400_cpu_412_firmware to a higher version than *; Upgrade siemens simatic_s7-400_cpu_414_firmware to a higher version than *; Upgrade siemens simatic_s7-400_cpu_416_firmware to a higher version than *; Upgrade siemens simatic_s7-400_cpu_417_firmware to a higher version than *