Which versions of LOGO! Soft Comfort are affected by EUVD-2026-56118?

LOGO! Soft Comfort versions prior to V9 store project passwords as unsalted SHA-256 hashes, enabling attackers who obtain project files to crack password protection through offline attacks without…

How to fix or mitigate EUVD-2026-56118?

Within 24 hours, inventory all systems running LOGO! Soft Comfort prior to V9 and audit file system permissions on project file storage locations. Within 7 days, implement strict access controls on project directories, eliminate unnecessary network share exposure, enforce encryption on backup repositories with restricted access, and review historical access logs for unauthorized file transfers. Within 30 days, plan and execute upgrade to LOGO! Soft Comfort V9 or later on all affected systems; deploy file integrity monitoring on project files; and establish compensating controls for any systems unable to upgrade immediately.

LOGO! Soft Comfort EUVD-2026-56118

Q: What is the CVSS score of EUVD-2026-56118?

EUVD-2026-56118 has a CVSS 4.0 base score of 7.0 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-57263 HIGH

Use of a One-Way Hash without a Salt (CWE-759)

2026-08-11 siemens

GHSA-pmf3-v4rm-f24p

Information Disclosure Siemens Logo Soft Comfort

7.0

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

7.0 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.8 MEDIUM

AV:L because exploitation requires local possession of the project file; PR:N as no system privileges are needed to crack an obtained file offline; no availability impact applies.

3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Aug 11, 2026 - 13:38 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 11, 2026 - 13:22 vuln.today

cvss_changed

Severity Changed

Aug 11, 2026 - 13:22 NVD

MEDIUM HIGH

CVSS changed

Aug 11, 2026 - 13:22 NVD

6.8 (MEDIUM) 7.0 (HIGH)

Analysis Generated

Aug 11, 2026 - 13:20 vuln.today

DescriptionCVE.org

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.

AnalysisAI

LOGO! Soft Comfort, Siemens' programming environment for LOGO! small programmable logic controllers, stores project protection passwords as unsalted SHA-256 hashes, enabling efficient offline recovery attacks against anyone who obtains a project file. All versions prior to V9 are affected according to Siemens advisory SSA-751328. An attacker who acquires the project file - through file system access, network share exposure, backup theft, or insider access - can bypass password protection by cracking the hash offline without rate-limiting or account lockout constraints. No public exploit has been identified at time of analysis, and exploitation is not confirmed in CISA KEV.

Technical ContextAI

LOGO! Soft Comfort (CPE: cpe:2.3:a:siemens:logo!_soft_comfort:*:*:*:*:*:*:*:*) is Siemens' desktop engineering tool used to program LOGO! PLCs, which are deployed in small-scale industrial and building automation environments. The root cause is CWE-759 (Use of a One-Way Hash without a Salt): when a project file is protected with a password, the application derives the stored credential as a bare SHA-256 digest with no per-credential salt. Because SHA-256 is a fast, general-purpose hash - not a purpose-built password hashing algorithm such as bcrypt, scrypt, or Argon2 - an attacker can attack it using precomputed rainbow tables for common passwords or run GPU-accelerated dictionary and brute-force campaigns at rates of billions of hashes per second. Additionally, the absence of a salt means two users with identical passwords produce identical hashes, allowing batch cracking across multiple project files simultaneously. This is fundamentally a cryptographic design flaw in the project file format, not an exploitable network service vulnerability.

RemediationAI

The primary fix is upgrading LOGO! Soft Comfort to version V9 or later, as indicated by the affected version range in Siemens advisory SSA-751328 (https://cert-portal.siemens.com/productcert/html/ssa-751328.html). Organizations should consult the advisory directly to confirm the exact patched release and any migration steps for existing project files whose stored hashes were created under the vulnerable scheme - previously protected project files will retain the weak hash until the password is reset within the updated software. As a compensating control prior to upgrading, organizations should restrict access to LOGO! Soft Comfort project files using OS-level file permissions, enforce storage only on access-controlled network shares or encrypted volumes, and treat project file backups with the same sensitivity as credential stores. Exporting or sharing project files via unencrypted channels (USB, email, unprotected SMB) should be prohibited. These controls limit the attacker's ability to obtain the project file in the first place, mitigating the risk without eliminating the underlying cryptographic weakness.