SSA-783481

csafDEsiemens_psirt

SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM

Advisory ansehen veröffentlicht 2021-03-09

A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device. The vulnerability is related to the hardware of the product. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which this vulnerability is fixed. See the chapter "Additional Information" below for more details. For more information please also refer to the related product support article: https://support.industry.siemens.com/cs/ww/en/view/109826554/.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-25236USmedium4.9—
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (A…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (32)

  • MitigationLOGO! 12/24RCE (6ED1052-1MD08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 230RCE (6ED1052-1FB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 230RCEo (6ED1052-2FB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24CE (6ED1052-1CC08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24CEo (6ED1052-2CC08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24RCE (6ED1052-1HB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationLOGO! 24RCEo (6ED1052-2HB08-0BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • MitigationSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)

    Siemens recommends limiting the possibilities to execute untrusted code if possible.

  • Kein Fix geplantLOGO! 12/24RCE (6ED1052-1MD08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 230RCE (6ED1052-1FB08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 230RCEo (6ED1052-2FB08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 24CE (6ED1052-1CC08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 24CEo (6ED1052-2CC08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 24RCE (6ED1052-1HB08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantLOGO! 24RCEo (6ED1052-2HB08-0BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)

    Currently no fix is planned

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan