Skip to content
OpenAdvisories
Medium SSA-783481 1 CVE

SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM

Published Mar 9, 2021 · Updated Oct 8, 2024 · Revision 4

Vendor: Siemens Product: LOGO! 12/24RCE (6ED1052-1MD08-0BA1) Product: LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) Product: LOGO! 230RCE (6ED1052-1FB08-0BA1) Product: LOGO! 230RCEo (6ED1052-2FB08-0BA1) Product: LOGO! 24CE (6ED1052-1CC08-0BA1) Product: LOGO! 24CEo (6ED1052-2CC08-0BA1) Product: LOGO! 24RCE (6ED1052-1HB08-0BA1) Product: LOGO! 24RCEo (6ED1052-2HB08-0BA1) Product: SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) Product: SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) Product: SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) Product: SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) Product: SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) Product: SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) Product: SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) Product: SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)

Summary

A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device.

The vulnerability is related to the hardware of the product. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which this vulnerability is fixed. See the chapter "Additional Information" below for more details.

For more information please also refer to the related product support article:
https://support.industry.siemens.com/cs/ww/en/view/109826554/.

Vulnerabilities 1

Revision history

  1. #4

    Added information about additional new SIPLUS LOGO! hardware versions

  2. #3

    Added information about additional new SIPLUS LOGO! hardware versions: SIPLUS LOGO! 24CE and SIPLUS LOGO! 230RCE

  3. #2

    Added information about additional new LOGO! V8.4 BM hardware versions

  4. #1

    Publication Date

References