Description
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | LOGO! Soft Comfort | < V9 | V9 |
Advisories 3
- ICSA-26-225-13 Siemens LOGO! Soft Comfort CISA ICS & IT advisories · Aug 13, 2026
- NCSC-2026-0282 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 11, 2026
- SSA-751328 SSA-751328: Recoverable Hardcoded AES Master Key in Siemens LOGO! Soft Comfort Siemens ProductCERT · Aug 11, 2026