SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the LOGO! V8.3 Product CA. The vulnerability is related to the specific hardware architecture of the LOGO! V8.3 BM. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which the vulnerability is fixed and the Product CA private key is rotated. See the chapter "Additional Information" below for more details. For more information please also refer to the related product support article: https://support.industry.siemens.com/cs/ww/en/view/109826554/.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-42784US | medium6.8 | — | ||
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED105… | ||||
references
External citations — patches, advisories, analysis.
remediations (32)
- No fix plannedLOGO! 12/24RCE (6ED1052-1MD08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 230RCE (6ED1052-1FB08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 230RCEo (6ED1052-2FB08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 24CE (6ED1052-1CC08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 24CEo (6ED1052-2CC08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 24RCE (6ED1052-1HB08-0BA1)
Currently no fix is planned
- No fix plannedLOGO! 24RCEo (6ED1052-2HB08-0BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)
Currently no fix is planned
- No fix plannedSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)
Currently no fix is planned
- WorkaroundLOGO! 12/24RCE (6ED1052-1MD08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 230RCE (6ED1052-1FB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 230RCEo (6ED1052-2FB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24CE (6ED1052-1CC08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24CEo (6ED1052-2CC08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24RCE (6ED1052-1HB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24RCEo (6ED1052-2HB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan