Lucene search
SiemensCVELIST:CVE-2022-36360HistoryOct 11, 2022 - 12:00 a.m.
CVE-2022-36360
2022-10-1100:00:00
CWE-345
siemens
www.cve.org
6
cve-2022-36360
logo! 8 bm
firmware update
authenticity checking
unencrypted firmware
attacker manipulation
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device.
CNA Affected
[
{
"vendor": "Siemens",
"product": "LOGO! 8 BM (incl. SIPLUS variants)",
"versions": [
{
"version": "All versions < V8.3",
"status": "affected"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2022-10-11 11:15:00
cnvd
cnvd
Siemens LOGO! 8 BM insecurity update vulnerability
2022-10-13 00:00:00
ics
ics
Siemens LOGO!
2022-10-13 12:00:00
nessus
nessus
cve
cve
CVE-2022-36360
2022-10-11 11:15:09
nvd
nvd
CVE-2022-36360
2022-10-11 11:15:09