Siemens LOGO! 8 BM
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25235US | high7.5 | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Too… | ||||
| CVE-2020-25234US | high7.7OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and use… | ||||
| CVE-2020-25233US | medium5.5OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used a… | ||||
| CVE-2020-25232US | high7.5OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated… | ||||
| CVE-2020-25231US | medium5.5OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the af… | ||||
| CVE-2020-25230US | high7.5OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could ex… | ||||
| CVE-2020-25229US | high7.5OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to repl… | ||||
| CVE-2020-25228US | critical9.8OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete… | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! Soft Comfort
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! Soft Comfort
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version if required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version is required.
https://support.industry.siemens.com/cs/ww/en/view/109783346/ - FixedLOGO! Soft Comfort
Update to V8.3
https://support.industry.siemens.com/cs/ww/en/view/109783154/ - FixedLOGO! Soft Comfort
Update to V8.3
https://support.industry.siemens.com/cs/ww/en/view/109783154/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan