CVE-2025-40815

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions, LOGO! 24CE 6ED1052-1CC08-0BA2 All versions, LOGO! 24CEo...

CVE-2025-40816: Missing Authentication for Critical Function

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions V1.84.05, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions V1.84.05, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions V1.84.05, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions V1.84.05, LOGO! 24CE 6ED1052-1CC08-0BA2 Al...

Siemens多款产品 安全漏洞

Siemens LOGO! is a programmable logic controller from Siemens Germany. A security vulnerability exists in various Siemens products that stems from improper validation of the TCP packet structure, which could result in a buffer overflow and execution of arbitrary code. The following products are...

CVE-2025-40815: Buffer Copy without Checking Size of Input

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions V1.84.05, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions V1.84.05, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions V1.84.05, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions V1.84.05, LOGO! 24CE 6ED1052-1CC08-0BA2 Al...

CVE-2025-40817: Missing Authentication for Critical Function

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions V1.84.05, LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions V1.84.05, LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions V1.84.05, LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions V1.84.05, LOGO! 24CE 6ED1052-1CC08-0BA2 Al...

PT-2025-46542

Name of the Vulnerable Software and Affected Versions LOGO! 12/24RCE 6ED1052-1MD08-0BA2 affected versions not specified LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 affected versions not specified LOGO! 230RCE 6ED1052-1FB08-0BA2 affected versions not specified LOGO! 230RCEo 6ED1052-2FB08-0BA2 affected...

Siemens LOGO! V8 BM Password Storage

The vulnerability of the microprogrammed logic controllers Siemens LOGO! V8 BM and SIPLUS LOGO! V8 BM lies in the unencrypted storage of passwords in an open format. Exploiting this vulnerability can allow attackers to access confidential information...

Siemens LOGO!8 BM Vulnerable Access

The vulnerability of the microprogrammed software of Siemens LOGO!8 BM and SIPLUS LOGO! lies in the improper checking of specified indices, positions, or offsets in input data during TCP packet processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protecte...

Siemens LOGO!8 BM

The vulnerability of the microprogrammed software used in Siemens LOGO!8 BM and SIPLUS LOGO! programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions by manipulating IP...

Siemens LOGO!8 BM PLC Code Execution

The vulnerability of the methods used to check the structure of TCP packets in Siemens LOGO!8 BM and SIPLUS LOGO! programmable logic controllers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

PT-2024-8115

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions all LOGO! 12/24RCEo versions all LOGO! 230RCE versions all LOGO! 230RCEo versions all LOGO! 24CE versions all LOGO! 24CEo versions all LOGO! 24RCE versions all LOGO! 24RCEo versions all SIPLUS LOGO! 12/24RCE versions a...

CVE-2022-42784

CVE-2022-42784 affects Siemens LOGO! and SIPLUS LOGO! devices (multiple models) with firmware versions >= V8.3. The vulnerability stems from improper protection against electromagnetic fault injection (EM-FI), enabling an attacker to dump/debug firmware, manipulate memory, and inject custom CA...

CVE-2022-42784: Improper Protection against Electromagnetic Fault Injection (EM-FI)

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions = V8.3, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions = V8.3, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions = V8.3, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions = V8.3, LOGO! 24CE 6ED1052-1CC08-0BA1 All versio...

Siemens LOGO! and SIPLUS LOGO!

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Design/Logic Flaw

A vulnerability has been identified in LOGO! 12/24RCE All versions, LOGO! 12/24RCE All versions, LOGO! 12/24RCEo All versions, LOGO! 12/24RCEo All versions, LOGO! 230RCE All versions, LOGO! 230RCE All versions, LOGO! 230RCEo All versions, LOGO! 230RCEo All versions, LOGO! 24CE All versions, LOGO!...

Design/Logic Flaw

A vulnerability has been identified in LOGO! 12/24RCE All versions, LOGO! 12/24RCEo All versions, LOGO! 230RCE All versions, LOGO! 230RCEo All versions, LOGO! 24CE All versions, LOGO! 24CEo All versions, LOGO! 24RCE All versions, LOGO! 24RCEo All versions, SIPLUS LOGO! 12/24RCE All versions, SIPL...

PT-2022-7652 · Siemens · Logo! 230Rce +6

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions 6ED1052-1MD08-0BA1 LOGO! 12/24RCEo versions 6ED1052-2MD08-0BA1 LOGO! 230RCE versions 6ED1052-1FB08-0BA1 LOGO! 230RCEo versions 6ED1052-2FB08-0BA1 LOGO! 24CE versions 6ED1052-1CC08-0BA1 LOGO! 24CEo versions...

CVE-2022-36361: Buffer Copy without Checking Size of Input

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...

PT-2022-7651 · Siemens · Logo! 230Rce +7

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions 6ED1052-1MD08-0BA1 through 6ED1052-1MD08-0BA2 LOGO! 12/24RCEo versions 6ED1052-2MD08-0BA1 through 6ED1052-2MD08-0BA2 LOGO! 230RCE versions 6ED1052-1FB08-0BA1 through 6ED1052-1FB08-0BA2 LOGO! 230RCEo versions...

CVE-2020-25236: Improper Handling of Exceptional Conditions

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...