CVE:CVE-2019-13940
CNNVD:CNNVD-202002-453
Siemens SIMATIC S7-1200是德国西门子（Siemens）公司的一款S7-1200系列PLC（可编程逻辑控制器）。
多款Siemens产品中存在资源管理错误漏洞。远程攻击者可借助特制的HTTP请求利用该漏洞导致拒绝服务。以下产品及版本受到影响：Siemens SIMATIC S7-1200 CPU系列(包括SIPLUS variants) V4.1之前版本；SIMATIC S7-300 PN/DP CPU系列(包括相关的ET200 CPUs和SIPLUS variants)；SIMATIC S7-400 PN/DP CPU V6及之前版本(包括SIPLUS variants)；SIMATIC S7-400 PN/DP V7版本(包括SIPLUS variants)；SIMATIC WinAC RTX (F) 2010(全部版本)。
solution:Upgrade siemens s7-1200_cpu_1211c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1212c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1214c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1215c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1217c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1212fc_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1214fc_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens s7-1200_cpu_1215fc_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens siplus_s7-1200_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens siplus_cpu_1211c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens siplus_cpu_1212c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens siplus_cpu_1214c_firmware to a higher version than 4.1,and avoid the version (,4.1]; Upgrade siemens siplus_cpu_1215c_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade siemens simatic_s7-300_cpu_319-3_pn/dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_315-2dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_315-2_pn/dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_317-2_dp_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_317-2_pn/dp_firmware to a higher version than *; Upgrade siemens siplus_s7-300_cpu_314_firmware to a higher version than *; Upgrade siemens siplus_s7-300_cpu_315-2_dp_firmware to a higher version than *; Upgrade siemens siplus_s7-300_cpu_315-2_pn/dp_firmware to a higher version than *; Upgrade siemens siplus_s7-300_cpu_317-2_pn/dp_firmware to a higher version than *; Upgrade siemens simatic_s7-400_pn/dp_cpu_firmware to a higher version than *; Upgrade siemens simatic_winac_rtx_(f)_2010 to a higher version than *