CVE-2022-42784

mediumpriority · track · 27EPSS 0.002 · 16 %ileDEEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.25% (16th) EPSS
CVSS 6.8 · medium
Is it mine?
80 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · siemens_psirt

EPSS · scored 2026-10-26

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a workaround is available.

  • WorkaroundLOGO! 12/24RCE (6ED1052-1MD08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 230RCE (6ED1052-1FB08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 230RCEo (6ED1052-2FB08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24CE (6ED1052-1CC08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24CEo (6ED1052-2CC08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24RCE (6ED1052-1HB08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24RCEo (6ED1052-2HB08-0BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)siemens_psirt

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 12/24RCE (6ED1052-1MD08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 230RCE (6ED1052-1FB08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 230RCEo (6ED1052-2FB08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24CE (6ED1052-1CC08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24CEo (6ED1052-2CC08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24RCE (6ED1052-1HB08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundLOGO! 24RCEo (6ED1052-2HB08-0BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • WorkaroundSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)cisa_csaf_ot

    If possible, connect the Base Module directly with LOGO! Soft Comfort and the Web Browser

  • No fix plannedLOGO! 12/24RCE (6ED1052-1MD08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 230RCE (6ED1052-1FB08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 230RCEo (6ED1052-2FB08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 24CE (6ED1052-1CC08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 24CEo (6ED1052-2CC08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 24RCE (6ED1052-1HB08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 24RCEo (6ED1052-2HB08-0BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)siemens_psirt

    Currently no fix is planned

  • No fix plannedLOGO! 12/24RCE (6ED1052-1MD08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 12/24RCEo (6ED1052-2MD08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 230RCE (6ED1052-1FB08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 230RCEo (6ED1052-2FB08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 24CE (6ED1052-1CC08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 24CEo (6ED1052-2CC08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 24RCE (6ED1052-1HB08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedLOGO! 24RCEo (6ED1052-2HB08-0BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1)cisa_csaf_ot

    Currently no fix is planned

  • No fix plannedSIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technical severity, 0–10. One row per scoring source.

7.6
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.2–7.6

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.9 · impact 5.9
v3.17.6highCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.17.6highCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU
v3.17.6highCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 0.9 · impact 6
v3.17.6highCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.16.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1319USCWE-1319USCWE-1319US
04

affected products (80)

Products and version ranges known to be affected.

showing 20 of 80
05

advisories (2)

Vendor and ecosystem advisories describing this.

  • SSA-844582SSA-844582: Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA2023-12-12csaf · siemens_psirtDE

    LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the LOGO! V8.3 Product CA. The vulnerability is related to the specific hardware architecture of the LOGO! V8.3 BM. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which the vulnerability is fixed and the Product CA private key is rotated. See the chapter "Additional Information" below for more details. For more information please also refer to the related product support article: https://support.industry.siemens.com/cs/ww/en/view/109826554/.

  • ICSA-23-348-04Siemens LOGO! and SIPLUS LOGO!2023-12-12icsa · cisa_csaf_otUS

    LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the LOGO! V8.3 Product CA. The vulnerability is related to the specific hardware architecture of the LOGO! V8.3 BM. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS LOGO! V8.4 BM product families for all affected devices in which the vulnerability is fixed and the Product CA private key is rotated. See the chapter "Additional Information" below for more details. For more information please also refer to the related product support article: https://support.industry.siemens.com/cs/ww/en/view/109826554/.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otsiemens_psirtNVDCVE.orgMITRE
published 2023-12-12modified 2026-06-17
08

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan