CVE-2022-36360
11.10.2022, 11:15
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device.Enginsight
| Vendor | Product | Version |
|---|---|---|
| siemens | logo\!_8_bm_firmware | 𝑥 < 8.3 |
| siemens | logo\!8_bm_fs-05_firmware | 𝑥 < 8.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration