ICSA-21-068-05

icsaUScisa_csaf_ot

Siemens LOGO! 8 BM

view advisory published 2021-03-09

A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device. The vulnerability is related to the hardware of the product. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which this vulnerability is fixed. See the chapter "Additional Information" below for more details. For more information please also refer to the related product support article: https://support.industry.siemens.com/cs/ww/en/view/109826554/.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-25236USmedium4.9—
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (A…
02

references

External citations — patches, advisories, analysis.

03

remediations (32)

  • MitigationLOGO! 12/24RCE (6ED1052-1MD08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 230RCE (6ED1052-1FB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 230RCEo (6ED1052-2FB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24CE (6ED1052-1CC08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24CEo (6ED1052-2CC08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24RCE (6ED1052-1HB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24RCEo (6ED1052-2HB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • No fix plannedLOGO! 12/24RCE (6ED1052-1MD08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 230RCE (6ED1052-1FB08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 230RCEo (6ED1052-2FB08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 24CE (6ED1052-1CC08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 24CEo (6ED1052-2CC08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 24RCE (6ED1052-1HB08-0BA1)

    Currently no fix is planned

  • No fix plannedLOGO! 24RCEo (6ED1052-2HB08-0BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)

    Currently no fix is planned

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan