ICSA-17-353-04

icsaUScisa_csaf_ot

Siemens LOGO! Soft Comfort

view advisory published 2017-12-19

ATTENTION: Remotely exploitable.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2017-12740USmedium5.9OT elevated—
Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remo…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • FixedLOGO! Soft Comfort

    As a general security measure, Siemens strongly recommends protecting network access to the devices with appropriate mechanisms. Siemens advises configuring the environment according to Siemens operational guidelines in order to run the devices in a protected IT environment.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan