Description
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file
to the affected software. Chained with other vulnerabilities this vulnerability could
ultimately lead to a system takeover by an attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | LOGO! Soft Comfort | All versions < V8.4 | — |
Advisories 2
- ICSA-21-103-09 Siemens LOGO! Soft Comfort CISA ICS & IT advisories · Dec 12, 2023
- SSA-983300 SSA-983300: Vulnerabilities in LOGO! Soft Comfort Siemens ProductCERT · Dec 12, 2023