Siemens LOGO! 8 BM (Update A)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-10921US | high7.5 | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access… | ||||
| CVE-2019-10920US | high7.5OT erhöht | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be d… | ||||
| CVE-2019-10919US | critical9.4OT erhöht | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Attackers with access to port 10005/tcp could perform device reconfigurations and o… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- MitigationLOGO! 8 BM (incl.'SIPLUS variants)
Apply Defense-in-Depth concept, including protection concept outlined in the system manual.
- BehobenLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update
- BehobenLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version is required. https://support.industry.siemens.com/cs/ww/en/view/109783346/
- BehobenLOGO! 8 BM (incl.'SIPLUS variants)
Update to V8.3. Notice that in order to update, a new hardware version is required. https://support.industry.siemens.com/cs/ww/en/view/109783346/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan