CVE:CVE-2019-10916
CNNVD:CNNVD-201905-597
Siemens SIMATIC PCS 7和SIMATIC WinCC都是德国西门子（Siemens）公司的产品。SIMATIC PCS 7是一套过程控制系统。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。
Siemens SIMATIC PCS 7和SIMATIC WinCC中存在SQL注入漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。以下产品及版本受到影响：SIMATIC PCS 7 V8.0及之前版本，SIMATIC PCS 7 V8.1，SIMATIC PCS 7 V8.2，SIMATIC PCS 7 V9.0（所有版本），SIMATIC WinCC (TIA Portal) V13，SIMATIC WinCC (TIA Portal) V14，SIMATIC WinCC (TIA Portal) V15，SIMATIC WinCC Runtime Professional，SIMATIC WinCC V7.2及之前版本，SIMATIC WinCC V7.3，SIMATIC WinCC V7.4，SIMATIC WinCC V7.5 Upd3之前的V7.5版本。
solution:Upgrade siemens simatic_pcs_7 to a higher version than 8.0,8.1,8.2,9.0,and avoid the version (,8.0],8.1,8.2,9.0; Upgrade siemens simatic_wincc to a higher version than 7.2,7.3,7.4,7.5,and avoid the version (,7.2],7.3,7.4,7.5; Upgrade siemens simatic_wincc_(tia_portal) to a higher version than 13.0,14.0,15.0,and avoid the version 13.0,14.0,15.0; Upgrade siemens simatic_wincc_runtime_professional to a higher version than *