SSA-983300: Vulnerabilities in LOGO! Soft Comfort
Two vulnerabilities have been identified in the LOGO! Soft Comfort software. These could allow an attacker to take over a system with the affected software installed. Siemens has released an update for LOGO! Soft Comfort and recommends to update to the latest version.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25244US | high7.2 | — | ||
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnerable to DLL hijacking.
Successful expl… | ||||
| CVE-2020-25243US | high7.2 | — | ||
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file
to the affec… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationLOGO! Soft Comfort
If possible do not execute the LOGO! Soft Comfort software with administrative privileges
- MitigationLOGO! Soft Comfort
If possible do not execute the LOGO! Soft Comfort software with administrative privileges
- FixedLOGO! Soft Comfort
Update to V8.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826553/ - FixedLOGO! Soft Comfort
Update to V8.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826553/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan