High ICSA-25-317-13 3 CVEs

Siemens LOGO! 8 BM Devices

Published Nov 11, 2025 · Updated Nov 11, 2025

Vendor: Siemens Product: LOGO! 12/24RCE (6ED1052-1MD08-0BA2) Product: LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) Product: LOGO! 230RCE (6ED1052-1FB08-0BA2) Product: LOGO! 230RCEo (6ED1052-2FB08-0BA2) Product: LOGO! 24CE (6ED1052-1CC08-0BA2) Product: LOGO! 24CEo (6ED1052-2CC08-0BA2) Product: LOGO! 24RCE (6ED1052-1HB08-0BA2) Product: LOGO! 24RCEo (6ED1052-2HB08-0BA2) Product: SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) Product: SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) Product: SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) Product: SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) Product: SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) Product: SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) Product: SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) Product: SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2)

Summary

LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device.

Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 3

High 7.6

CVE-2025-40816

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (…

Siemens SIPLUS LOGO! 12/24RCE LOGO! 12/24RCEo SIPLUS LOGO! 230RCE ICS / OT

Nov 11, 2025
High 7.2

CVE-2025-40815

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (…

Siemens SIPLUS LOGO! 24CE LOGO! 24CEo SIPLUS LOGO! 24RCE ICS / OT

Nov 11, 2025
Medium 6.5

CVE-2025-40817

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (…

Siemens SIPLUS LOGO! 230RCE LOGO! 230RCEo SIPLUS LOGO! 24CE ICS / OT

Nov 11, 2025

Revision history

2025-11-11 #1
Publication Date

References

SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-267056.html
ICS Advisory ICSA-25-317-13 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-13
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b