SSA-983300: Vulnerabilities in LOGO! Soft Comfort
Two vulnerabilities have been identified in the LOGO! Soft Comfort software. These could allow an attacker to take over a system with the affected software installed. Siemens has released an update for LOGO! Soft Comfort and recommends to update to the latest version.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25244US | high7.2 | — | ||
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnerable to DLL hijacking.
Successful expl… | ||||
| CVE-2020-25243US | high7.2 | — | ||
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file
to the affec… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationLOGO! Soft Comfort
If possible do not execute the LOGO! Soft Comfort software with administrative privileges
- MitigationLOGO! Soft Comfort
If possible do not execute the LOGO! Soft Comfort software with administrative privileges
- BehobenLOGO! Soft Comfort
Update to V8.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826553/ - BehobenLOGO! Soft Comfort
Update to V8.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826553/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan