CVE:CVE-2018-13804
CNNVD:CNNVD-201811-484
Siemens SIMATIC IT LMS、SIMATIC IT Production Suite和SIMATIC IT UA Discrete Manufacturing都是德国西门子（Siemens）公司的产品。Siemens SIMATIC IT LMS是一套总体设备效能（OEE）的线路监控系统。SIMATIC IT Production Suite是一套工厂生产管理套件。SIMATIC IT UA Discrete Manufacturing是一套为制造业提供结构化服务的解决方案。
Siemens SIMATIC IT LMS（全部版本）、SIMATIC IT Production Suite 7.1 Upd3之前的7.1版本和SIMATIC IT UA Discrete Manufacturing 2.4之前版本中存在授权问题漏洞。攻击者可利用该漏洞绕过应用程序的身份验证检测，影响系统的保密性、完整性和可用性。
solution:Upgrade siemens simatic_it_line_monitoring_system to a higher version than *; Upgrade siemens simatic_it_production_suite to a higher version than v7.1,and avoid the version v7.1; Upgrade siemens simatic_it_ua_discrete_manufacturing to a higher version than v1.2,v1.3,v2.3,v2.4,and avoid the version (,v1.2],v1.3,v2.3,v2.4