Siemens LOGO! (Update A)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7589US | critical9.1OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration… | ||||
references
External citations — patches, advisories, analysis.
- SSA-817401: Missing Authentication Vulnerability in SIEMENS LOGO! - HTML Versionself
- ICS Advisory ICSA-20-161-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-161-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (1)
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan