CVE:CVE-2014-2908
CNNVD:CNNVD-201404-505
Siemens SIMATIC S7-1200是德国西门子（Siemens）公司的一款应用于中小型自动化系统中的可编程逻辑控制器（PLC）。
Siemens SIMATIC S7-1200 CPU设备2.x和3.x版本的集成的Web服务器中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade siemens simatic_s7_cpu_1200_firmware to a higher version than 2.0,3.0,3.0.2,and avoid the version 2.0,3.0,3.0.2; Upgrade siemens simatic_s7_cpu-1211c to a higher version than -; Upgrade siemens simatic_s7_cpu_1212c to a higher version than -; Upgrade siemens simatic_s7_cpu_1214c to a higher version than -; Upgrade siemens simatic_s7_cpu_1215c to a higher version than -; Upgrade siemens simatic_s7_cpu_1217c to a higher version than -