Description
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Siemens | LOGO! 8 BM (incl. SIPLUS variants) | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-39075 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2024-08-03T10:00:04.365Z
Reserved: 2022-07-21T00:00:00.000Z
Link: CVE-2022-36360
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-10-11T11:15:09.973
Modified: 2024-11-21T07:12:51.960
Link: CVE-2022-36360
Redhat
No data.
OpenCVE Enrichment
No data.