Description
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | LOGO! Soft Comfort | < V9 | V9 |
Advisories 3
- ICSA-26-225-13 Siemens LOGO! Soft Comfort CISA ICS & IT advisories · Aug 13, 2026
- NCSC-2026-0282 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 11, 2026
- SSA-751328 SSA-751328: Recoverable Hardcoded AES Master Key in Siemens LOGO! Soft Comfort Siemens ProductCERT · Aug 11, 2026