CVE:CVE-2022-40227
CNNVD:CNNVD-202210-446
Siemens SIMATIC HMI Comfort Panels是德国西门子（Siemens）公司的一款触摸面板设备。
Siemens 多款产品存在输入验证错误漏洞，该漏洞源于受影响的设备无法正确验证通过 TCP 发送到某些服务的输入。这可能允许未经身份验证的远程攻击者通过发送特制的 TCP 数据包来导致永久拒绝服务条件（需要重新启动设备）。SIMATIC HMI Comfort Panels V17 Update 4版本之前，SIMATIC HMI KTP Mobile Panels V17 Update 4版本之前，SIMATIC HMI KTP1200 Basic V17 Update 5版本之前，SIMATIC HMI KTP400 Basic V17 Update 5版本之前，SIMATIC HMI KTP700 Basic V17 Update 5版本之前，SIMATIC HMI KTP900 Basic V17 Update 5版本之前，SIPLUS HMI KTP1200 BASIC V17 Update 5版本之前，SIPLUS HMI KTP400 BASIC V17 Update 5版本之前，SIPLUS HMI KTP700 BASIC V17 Update 5版本之前，SIPLUS HMI KTP900 BASIC V17 Update 5版本之前。
solution:Upgrade siemens simatic_hmi_comfort_panels_firmware to a higher version than 17.0,17.0,17.0:update1,17.0:update2,17.0:update3,and avoid the version (,17.0),17.0,17.0:update1,17.0:update2,17.0:update3; Upgrade siemens simatic_hmi_ktp400_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens simatic_hmi_ktp700_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens simatic_hmi_ktp900_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens simatic_hmi_ktp1200_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens simatic_hmi_ktp_mobile_panels_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3; Upgrade siemens siplus_hmi_ktp400_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens siplus_hmi_ktp700_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens siplus_hmi_ktp900_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4; Upgrade siemens siplus_hmi_ktp1200_basic_firmware to a higher version than 17.0,17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4,and avoid the version (,17.0),17.0,17.0:udpate1,17.0:update2,17.0:update3,17.0:update4