CVE-2024-39922

CVE-2024-39922 affects Siemens LOGO! family devices (LOGO! 12/24RCE, 24CE, 24RCE, 230RCE and SIPLUS variants). Root cause: plaintext storage of user passwords in embedded storage ICs, enabling a physical attacker with access to recover credentials. Affects all versions for listed models; exploita...

Siemens LOGO! V8.3 BM Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2024-8115

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions all LOGO! 12/24RCEo versions all LOGO! 230RCE versions all LOGO! 230RCEo versions all LOGO! 24CE versions all LOGO! 24CEo versions all LOGO! 24RCE versions all LOGO! 24RCEo versions all SIPLUS LOGO! 12/24RCE versions a...

Siemens LOGO! security vulnerabilities

Siemens LOGO! BM Base Module devices are used for basic small-scale automation tasks.SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO! SIPLUS devices use the same firmware as the products on which they are based. A password...

CVE-2024-39922: Plaintext Storage of a Password

A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

Siemens LOGO PLC Cryptographic Defect Unauthorized Access

The vulnerability of Siemens LOGO programmable logic controllers’ built-in software is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an attacker operating remotely to gain access to protected information...

Siemens LOGO Authentication Bypass

The vulnerability of the authentication mechanism of Siemens’ programmable logic controller LOGO software relates to the use of a reversible one-way hash function. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...

Siemens LOGO PLC Access Control

The vulnerability of the access control mechanism in Siemens LOGO programmable logic controllers is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Siemens LOGO PLC Security Bypass

The vulnerability of Siemens LOGO programmable logic controllers’ built-in software is related to the incorrect implementation of security functions for the user interface. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the controller...

CVE-2024-37523

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AMP-MODE Login Logo Editor allows Stored XSS.This issue affects Login Logo Editor: from n/a through 1.3.3...

CVE-2024-37523

The CVE-2024-37523 issue targets the AMP-MODE Login Logo Editor with Stored XSS due to improper input handling. Affected: Login Logo Editor versions up to 1.3.3. Root cause: improper neutralization of input during web page generation. Exploitation specifics are not provided in the core documents;...

CVE-2024-37523 WordPress Login Logo Editor plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AMP-MODE Login Logo Editor allows Stored XSS.This issue affects Login Logo Editor: from n/a through 1.3.3...

CVE-2024-37523: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AMP-MODE Login Logo Editor allows Stored XSS.This issue affects Login Logo Editor: from n/a through 1.3.3...

PT-2024-27628 · Unknown · Amp-Mode Login Logo Editor

Name of the Vulnerable Software and Affected Versions: AMP-MODE Login Logo Editor versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the AMP-MODE Login...

SUSE CVE-2022-48823

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF Hung task call trace was seen during LOGO processing. 974.309060 0000:00:00.0:qedfehdevicereset:868: 1:0:2:0: LUN RESET Issued... 974.309065...

CVE-2022-48823

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF Hung task call trace was seen during LOGO processing. 974.309060 0000:00:00.0:qedfehdevicereset:868: 1:0:2:0: LUN RESET Issued... 974.309065...

CVE-2022-48823

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF Hung task call trace was seen during LOGO processing. 974.309060 0000:00:00.0:qedfehdevicereset:868: 1:0:2:0: LUN RESET Issued... 974.309065...