CVE:CVE-2019-10923
CNNVD:CNNVD-201910-565
Siemens SIMATIC是德国西门子（Siemens）公司的一款组态软件。
多款Siemens产品中存在资源管理错误漏洞。攻击者可通过发送特制数据包利用该漏洞造成拒绝服务。以下产品及版本受到影响：Siemens SIMATIC NET CP 1616 V2.8之前版本；SINUMERIK 840D sl（全部版本）；SCALANCE X-200IRT系列(包括SIPLUS NET variants) V5.2.1之前版本；SIMATIC ET200S (包括SIPLUS variants) (全部版本)等。
solution:Upgrade siemens cp1604_firmware to a higher version than 2.8,and avoid the version (,2.8); Upgrade siemens cp1616_firmware to a higher version than 2.8,and avoid the version (,2.8); Upgrade siemens dk_standard_ethernet_controller_firmware to a higher version than 4.1.1,4.1.1,4.1.1:p4,and avoid the version (,4.1.1),4.1.1,4.1.1:p4; Upgrade siemens ek-ertec_200_firmware to a higher version than 4.5.0,4.5.0,and avoid the version (,4.5.0),4.5.0; Upgrade siemens ek-ertec_200p_firmware to a higher version than 4.5.0,and avoid the version (,4.5.0); Upgrade siemens scalance_x-200irt_firmware to a higher version than 5.2.1,and avoid the version (,5.2.1); Upgrade siemens simatic_et_200m_firmware to a higher version than *; Upgrade siemens simatic_et_200s_firmware to a higher version than *; Upgrade siemens simatic_et_200ecopn_firmware to a higher version than *; Upgrade siemens simatic_pn/pn_coupler_6es7158-3ad01-0xa0_firmware to a higher version than *; Upgrade siemens simatic_s7-300_cpu_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_312_ifm_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_313_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_314_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_314_ifm_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_315_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_315-2_dp_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_316-2_dp_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-300_cpu_318-2_firmware to a higher version than 3.3.17,and avoid the version (,3.3.17); Upgrade siemens simatic_s7-400_v6_firmware to a higher version than *; Upgrade siemens simatic_s7-400_pn_v7_firmware to a higher version than *; Upgrade siemens simatic_s7-400_dp_v7_firmware to a higher version than *; Upgrade siemens simatic_winac_rtx_(f)_firmware to a higher version than 2010,2010,2010:sp1,2010:sp2,and avoid the version (,2010),2010,2010:sp1,2010:sp2; Upgrade siemens simotion_firmware to a higher version than *; Upgrade siemens sinamics_dcm_firmware to a higher version than 1.5,1.5,and avoid the version (,1.5),1.5; Upgrade siemens sinamics_dcp_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade siemens sinamics_g110m_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_g120_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_g130_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_g150_firmware to a higher version than 4.8,and avoid the version (,4.8); Upgrade siemens sinamics_gh150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_gl150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_gm150_firmware to a higher version than 4.8,4.8,and avoid the version (,4.8),4.8; Upgrade siemens sinamics_s110_firmware to a higher version than *; Upgrade siemens sinamics_s120_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_s150_firmware to a higher version than 4.8,and avoid the version (,4.8); Upgrade siemens sinamics_sl150_firmware to a higher version than 4.7,4.7,and avoid the version (,4.7),4.7; Upgrade siemens sinamics_sm120_firmware to a higher version than *; Upgrade siemens sinumerik_828d to a higher version than 4.8,4.8,4.8:sp1,4.8:sp2,4.8:sp3,4.8:sp4,and avoid the version (,4.8),4.8,4.8:sp1,4.8:sp2,4.8:sp3,4.8:sp4; Upgrade siemens sinumerik_840d_sl to a higher version than *