Siemens LOGO! 8 BM (Update A)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10921US | high7.5 | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access… | ||||
| CVE-2019-10920US | high7.5OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be d… | ||||
| CVE-2019-10919US | critical9.4OT elevated | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Attackers with access to port 10005/tcp could perform device reconfigurations and o… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update
- FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version is required. https://support.industry.siemens.com/cs/ww/en/view/109783346/
- FixedLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version is required. https://support.industry.siemens.com/cs/ww/en/view/109783346/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan