Summary
LOGO! 8 BM (incl. SIPLUS variants) contains multiple web-related vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state or retrieve parts of the memory.
The vulnerabilities are related to the hardware of the product. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which several of those vulnerabilities are fixed. See the chapter "Additional Information" below for more details.
For more information please also refer to the related product support article:
https://support.industry.siemens.com/cs/ww/en/view/109826554/.
Vulnerabilities 3
-
Critical 9.8
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD…
-
High 7.5
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD0…
-
Medium 5.3
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD…
Revision history
-
#4
Added information about additional new SIPLUS LOGO! hardware versions
-
#3
Added information about additional new SIPLUS LOGO! hardware versions: SIPLUS LOGO! 24CE and SIPLUS LOGO! 230RCE
-
#2
Added information about additional new LOGO! V8.4 BM hardware versions
-
#1
Publication Date
References
-
SSA-955858: Multiple Vulnerabilities in LOGO! 8 BM Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-955858.html