CVE:CVE-2019-6575
CNNVD:CNNVD-201904-462
Siemens SIMATIC S7-1500 CPU是德国西门子（Siemens）公司的一款CPU（中央处理器）模块。
SIMATIC S7-1500 CPU 存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。以下产品及版本受到影响：Siemens SIMATIC CP443-1 OPC UA (所有版本)；SIMATIC ET 200 Open Controller CPU 1515SP PC2 2.7之前版本；SIMATIC HMI Comfort Outdoor Panels 7" ＆ 15" (所有版本)；SIMATIC HMI Comfort Panels 4" - 22" (所有版本)；SIMATIC HMI KTP Mobile Panels KTP400F (所有版本)；SIMATIC HMI KTP Mobile Panels KTP700 (所有版本)；SIMATIC HMI KTP Mobile Panels KTP700F (所有版本)；SIMATIC HMI KTP Mobile Panels KTP900 (所有版本)；SIMATIC HMI KTP Mobile Panels KTP900F (所有版本)；SIMATIC IPC DiagMonitor V5.1.3之前版本；SIMATIC NET PC Software 7.1及之前版本；SIMATIC RF188C 1.1.0之前版本；SIMATIC RF600R 3.2.1之前版本；SIMATIC S7-1500 CPU family 2.5及之后版本(2.6.1版本已修复) ；SIMATIC S7-1500 Software Controller 2.5及之后版本(2.7版本已修复)；SIMATIC WinCC OA 3.15-P018之前版本；SIMATIC WinCC Runtime Advanced (所有版本)；SINEC-NMS V1.0 SP1之前版本；SINEMA Server 14 SP2之前版本；SINUMERIK OPC UA Server 2.1之前版本；TeleControl Server Basic (所有版本)。
solution:Upgrade siemens simatic_cp443-1_opc_ua_firmware to a higher version than *; Upgrade siemens simatic_et_200_open_controller_cpu_1515sp_pc2_firmware to a higher version than 2.7,and avoid the version (,2.7); Upgrade siemens simatic_ipc_diagmonitor_firmware to a higher version than *; Upgrade siemens simatic_net_pc_software_firmware to a higher version than *; Upgrade siemens simatic_rf188c_firmware to a higher version than *; Upgrade siemens simatic_rf600r_firmware to a higher version than *; Upgrade siemens simatic_s7-1500_firmware to a higher version than 2.5,and avoid the version (,2.5]; Upgrade siemens opc_unified_architecture to a higher version than *; Upgrade siemens simatic_s7-1500_software_controller to a higher version than 2.5,and avoid the version (,2.5]; Upgrade siemens simatic_wincc_oa to a higher version than 3.15-p018,and avoid the version (,3.15-p018); Upgrade siemens simatic_wincc_runtime_advanced to a higher version than *; Upgrade siemens simatic_wincc_runtime_comfort to a higher version than *; Upgrade siemens simatic_wincc_runtime_hsp_comfort to a higher version than *; Upgrade siemens simatic_wincc_runtime_mobile to a higher version than *; Upgrade siemens sinec-nms to a higher version than 1.0,1.0,and avoid the version (,1.0),1.0; Upgrade siemens sinema_server to a higher version than *; Upgrade siemens sinumerik_opc_ua_server to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens telecontrol_server_basic to a higher version than 3.1.1,and avoid the version (,3.1.1); Upgrade siemens simatic_s7-1500f_firmware to a higher version than 2.5,and avoid the version (,2.5]; Upgrade siemens simatic_s7-1500s_firmware to a higher version than 2.5,and avoid the version (,2.5]; Upgrade siemens simatic_s7-1500t_firmware to a higher version than 2.5,and avoid the version (,2.5]; Upgrade siemens simatic_hmi_comfort_outdoor_panels_firmware to a higher version than 15.1,15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3,and avoid the version (,15.1),15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmware to a higher version than 15.1,15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3,and avoid the version (,15.1),15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900_firmware to a higher version than 15.1,15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3,and avoid the version (,15.1),15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmware to a higher version than 15.1,15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3,and avoid the version (,15.1),15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700_firmware to a higher version than 15.1,15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3,and avoid the version (,15.1),15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3; Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmware to a higher version than 15.1,15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3,and avoid the version (,15.1),15.1,15.1:upd_1,15.1:upd_2,15.1:upd_3