Siemens LOGO! and SIPLUS LOGO!
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the LOGO! V8.3 Product CA. The vulnerability is related to the specific hardware architecture of the LOGO! V8.3 BM. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which the vulnerability is fixed and the Product CA private key is rotated. See the chapter "Additional Information" below for more details. For more information please also refer to the related product support article: https://support.industry.siemens.com/cs/ww/en/view/109826554/.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-42784US | medium6.8 | — | ||
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED105… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA - CSAF Versionself
- SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA - HTML Versionself
- ICS Advisory ICSA-23-348-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (32)
- Kein Fix geplantLOGO! 12/24RCE (6ED1052-1MD08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 230RCE (6ED1052-1FB08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 230RCEo (6ED1052-2FB08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 24CE (6ED1052-1CC08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 24CEo (6ED1052-2CC08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 24RCE (6ED1052-1HB08-0BA1)
Currently no fix is planned
- Kein Fix geplantLOGO! 24RCEo (6ED1052-2HB08-0BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)
Currently no fix is planned
- Kein Fix geplantSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)
Currently no fix is planned
- WorkaroundLOGO! 12/24RCE (6ED1052-1MD08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 230RCE (6ED1052-1FB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 230RCEo (6ED1052-2FB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24CE (6ED1052-1CC08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24CEo (6ED1052-2CC08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24RCE (6ED1052-1HB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundLOGO! 24RCEo (6ED1052-2HB08-0BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
- WorkaroundSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)
If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan