CVE:CVE-2019-6574
CNNVD:CNNVD-201905-606
Siemens SINAMICS PERFECT HARMONY GH180是德国西门子（Siemens）公司的一款高压交流变频器。
多款Siemens产品中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品及版本受到影响：SINAMICS PERFECT HARMONY GH180 with NXG I control MLFB 6SR2；SINAMICS PERFECT HARMONY GH180 with NXG I control MLFB 6SR3；SINAMICS PERFECT HARMONY GH180 with NXG I control MLFB 6SR4；SINAMICS PERFECT HARMONY GH180 with NXG II control MLFB 6SR2；SINAMICS PERFECT HARMONY GH180 with NXG II control MLFB 6SR3；SINAMICS PERFECT HARMONY GH180 with NXG II control MLFB  6SR4。
solution:Upgrade siemens sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr2_firmware to a higher version than *; Upgrade siemens sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr3_firmware to a higher version than *; Upgrade siemens sinamics_perfect_harmony_gh180_with_nxg_i_control_mlfb_6sr4_firmware to a higher version than *; Upgrade siemens sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr2_firmware to a higher version than *; Upgrade siemens sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr3_firmware to a higher version than *; Upgrade siemens sinamics_perfect_harmony_gh180_with_nxg_ii_control_mlfb_6sr4_firmware to a higher version than *