CVE:CVE-2019-6576
CNNVD:CNNVD-201905-589
Siemens SIMATIC WinCC等都是德国西门子（Siemens）公司的产品。SIMATIC WinCC是一套自动化的数据采集与监控（SCADA）系统。Siemens SIMATIC HMI Comfort Panels是一款触摸面板设备。Siemens SIMATIC HMI Comfort Outdoor Panels是一款专用于户外的触摸面板设备。
多款Siemens产品中存在安全漏洞。攻击者可利用该漏洞获取TLS会话密钥并解密TLS流量，进而影响设备与合法用户之间的通信的保密性。以下产品及版本受到影响：SIMATIC HMI Comfort Panels 15.1 Update 1之前版本；SIMATIC HMI Comfort Outdoor Panels 15.1 Update 1之前版本；SIMATIC HMI KTP Mobile Panels KTP400F v15.1 Update 1之前版本；SIMATIC HMI KTP Mobile Panels KTP700 v15.1 Update 1之前版本；SIMATIC HMI KTP Mobile Panels KTP700F v15.1 Update 1之前版本；SIMATIC HMI KTP Mobile Panels KTP900 v15.1 Update 1之前版本；SIMATIC HMI KTP Mobile Panels KTP900F v15.1 Update 1之前版本；SIMATIC WinCC Runtime Advanced v15.1 Update 1之前版本；SIMATIC WinCC Runtime Professional v15.1 Update 1之前版本；SIMATIC WinCC (TIA Portal) v15.1 Update 1之前版本；SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel)（全部版本）。
solution:Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_comfort_outdoor_panels_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp400f_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp700f_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_ktp_mobile_panels_ktp900f_firmware to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_wincc_(tia_portal) to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_wincc_runtime to a higher version than 15.1,and avoid the version (,15.1); Upgrade siemens simatic_hmi_tp_firmware to a higher version than *; Upgrade siemens simatic_hmi_mp_firmware to a higher version than *; Upgrade siemens simatic_hmi_op_firmware to a higher version than *