Siemens LOGO! (Update A)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-7589US | critical9.1OT erhöht | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-817401: Missing Authentication Vulnerability in SIEMENS LOGO! - HTML Versionself
- ICS Advisory ICSA-20-161-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-161-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (1)
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan