Siemens LOGO!
Advisory ansehen veröffentlicht 2022-10-11
LOGO! 8 BM (incl. SIPLUS variants) contains a vulnerability that could allow an attacker to install manipulated firmware packages. Siemens has released an update for the LOGO! 8 BM (incl. SIPLUS variants) and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-36360US | high7.5OT erhöht | — | ||
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermo… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-928782: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices - CSAF Versionself
- SSA-928782: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices - PDF Versionself
- SSA-928782: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices - TXT Versionself
- ICS Advisory ICSA-22-286-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-286-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationLOGO! 8 BM (incl. SIPLUS variants)
Be especially careful to obtain and install firmware upgrades only from official sources
- BehobenLOGO! 8 BM (incl. SIPLUS variants)
Update to V8.3 or later version. Note that in order to update, a new hardware version is required
https://support.industry.siemens.com/cs/ww/en/view/109783346/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan