CVE:CVE-2022-33137
CNNVD:CNNVD-202207-840
Siemens SIMATIC是西门子（Siemens）的一款组态软件。
Siemens SIMATIC MV540 H V3.3之前版本、SIMATIC MV540 S V3.3之前版本、SIMATIC MV550 H V3.3之前版本、SIMATIC MV550 S V3.3之前版本、SIMATIC MV560 U V3.3之前版本、SIMATIC MV560 X V3.3之前版本存在安全漏洞，该漏洞源于受影响设备的Web会话管理在某些注销情况下不会使会话ID失效。这可能允许经过身份验证的远程攻击者劫持其他用户的会话。
solution:Upgrade siemens simatic_mv540_h_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv540_s_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv550_h_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv550_s_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv560_u_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv560_x_firmware to a higher version than 3.3,and avoid the version (,3.3)