CVE:CVE-2018-16555
CNNVD:CNNVD-201811-487
Siemens SCALANCE S602等都是德国西门子（Siemens）公司的以太网安全模块。
多款Siemens产品中存在跨站脚本漏洞。远程攻击者可借助恶意的链接利用该漏洞注入任意的脚本。以下产品和版本受到影响：Siemens SCALANCE S602 4.0.1.1之前版本；SCALANCE S612 4.0.1.1之前版本；SCALANCE S623 4.0.1.1之前版本；SCALANCE S627-2M 4.0.1.1之前版本。
solution:Upgrade siemens scalance_s602_firmware to a higher version than v4.0.1.1,and avoid the version (,v4.0.1.1); Upgrade siemens scalance_s612_firmware to a higher version than 4.0.1.1,and avoid the version (,4.0.1.1); Upgrade siemens scalance_s623_firmware to a higher version than 4.0.1.1,and avoid the version (,4.0.1.1); Upgrade siemens scalance_s627-2m_firmware to a higher version than 4.0.1.1,and avoid the version (,4.0.1.1)