CVE:CVE-2022-34821
CNNVD:CNNVD-202207-902
Siemens SIMATIC S7-1200和Siemens SIMATIC S7-1500都是德国西门子（Siemens）公司的产品。Siemens SIMATIC S7-1200是一款S7-1200系列PLC（可编程逻辑控制器）。Siemens SIMATIC S7-1500是一款可编程逻辑控制器。
Siemens SIMATIC 多款产品存在代码注入漏洞。攻击者利用该漏洞将代码注入 OpenVPN 的特定配置选项。以下产品及版本受到影响：SIMATIC CP 1242-7 V2版本、SIMATIC CP 1243-1版本、SIMATIC CP 1243-7 LTE EU版本、SIMATIC CP 1243-7 LTE US版本、SIMATIC CP 1243-8 IRC版本、SIMATIC CP 1542SP-1 IRC V2.0版本及之后版本、SIMATIC CP 1543-1 V3.0.22之前版本、SIMATIC CP 1543SP-1 V2.0版本及之后版本、SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL V2.0版本及之后版本、SIPLUS ET 200SP CP 1543SP-1 ISEC V2.0版本及之后版本、SIPLUS ET 200SP CP 1543SP -1 ISEC TX RAIL V2.0版本及之后版本、SIPLUS NET CP 1242-7 V2版本、SIPLUS NET CP 1543-1 V3.0.22之前版本、SIPLUS S7-1200 CP 1243-1版本、SIPLUS S7-1200 CP 1243-1 RAIL版本。
solution:Upgrade siemens simatic_cp_1242-7_v2_firmware to a higher version than *; Upgrade siemens simatic_cp_1243-1_firmware to a higher version than *; Upgrade siemens simatic_cp_1243-7_lte_eu_firmware to a higher version than *; Upgrade siemens simatic_cp_1243-7_lte_us_firmware to a higher version than *; Upgrade siemens simatic_cp_1243-8_irc_firmware to a higher version than *; siemens simatic_cp_1542sp-1_irc_firmware avoid the version [2.0,); Upgrade siemens simatic_cp_1543-1_firmware to a higher version than 3.0.22,and avoid the version (,3.0.22); siemens simatic_cp_1543sp-1_firmware avoid the version [2.0,); siemens siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware avoid the version [2.0,); siemens siplus_et_200sp_cp_1543sp-1_isec_firmware avoid the version [2.0,); siemens siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware avoid the version [2.0,); Upgrade siemens siplus_net_cp_1242-7_v2_firmware to a higher version than *; Upgrade siemens siplus_net_cp_1543-1_firmware to a higher version than 3.0.22,and avoid the version (,3.0.22); Upgrade siemens siplus_s7-1200_cp_1243-1_firmware to a higher version than *; Upgrade siemens siplus_s7-1200_cp_1243-1_rail_firmware to a higher version than *