Description
Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while performing a Man-in-the-Middle (MitM) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Siemens LOGO! Soft Comfort (All versions before V8.2) | Siemens LOGO! Soft Comfort (All versions before V8.2) | — |
Advisories 1
- ICSA-17-353-04 Siemens LOGO! Soft Comfort CISA ICS & IT advisories · Dec 19, 2017