CVE:CVE-2022-24287
CNNVD:CNNVD-202205-2738
Siemens SIMATIC WinCC是德国西门子（Siemens）公司的一套自动化的数据采集与监控（SCADA）系统。
Siemens SIMATIC WinCC 存在安全漏洞。经过身份验证的攻击者利用该漏洞可以逃离 Kiosk 模式。
solution:Upgrade siemens simatic_pcs_7 to a higher version than 9.0,9.1,and avoid the version (,9.0],9.1; Upgrade siemens simatic_wincc to a higher version than 7.4,7.5,7.5:sp1,7.5:sp1_update1,7.5:sp1_update2,7.5:sp2,7.5:sp2_update1,7.5:sp2_update2,7.5:sp2_update3,7.5:sp2_update4,7.5:sp2_update5,7.5:sp2_update6,7.5:sp2_update7,and avoid the version (,7.4],7.5,7.5:sp1,7.5:sp1_update1,7.5:sp1_update2,7.5:sp2,7.5:sp2_update1,7.5:sp2_update2,7.5:sp2_update3,7.5:sp2_update4,7.5:sp2_update5,7.5:sp2_update6,7.5:sp2_update7; Upgrade siemens simatic_wincc_runtime_professional to a higher version than 16,17,and avoid the version (,16],17