Logo Soft Comfort
Monthly
LOGO! Soft Comfort, Siemens' programming environment for LOGO! small programmable logic controllers, stores project protection passwords as unsalted SHA-256 hashes, enabling efficient offline recovery attacks against anyone who obtains a project file. All versions prior to V9 are affected according to Siemens advisory SSA-751328. An attacker who acquires the project file - through file system access, network share exposure, backup theft, or insider access - can bypass password protection by cracking the hash offline without rate-limiting or account lockout constraints. No public exploit has been identified at time of analysis, and exploitation is not confirmed in CISA KEV.
Hardcoded AES encryption in Siemens LOGO! Soft Comfort (all versions before V9) exposes every password-protected project file to decryption without knowledge of any user-defined password. A local attacker who can access the application installation - via shared workstation access, insider position, or post-compromise foothold - can extract the static master key from binaries or process memory and apply it universally to any project file ever encrypted by the affected software. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.
A vulnerability has been identified in LOGO!. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability has been identified in LOGO!. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Siemens LOGO!. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
LOGO! Soft Comfort, Siemens' programming environment for LOGO! small programmable logic controllers, stores project protection passwords as unsalted SHA-256 hashes, enabling efficient offline recovery attacks against anyone who obtains a project file. All versions prior to V9 are affected according to Siemens advisory SSA-751328. An attacker who acquires the project file - through file system access, network share exposure, backup theft, or insider access - can bypass password protection by cracking the hash offline without rate-limiting or account lockout constraints. No public exploit has been identified at time of analysis, and exploitation is not confirmed in CISA KEV.
Hardcoded AES encryption in Siemens LOGO! Soft Comfort (all versions before V9) exposes every password-protected project file to decryption without knowledge of any user-defined password. A local attacker who can access the application installation - via shared workstation access, insider position, or post-compromise foothold - can extract the static master key from binaries or process memory and apply it universally to any project file ever encrypted by the affected software. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.
A vulnerability has been identified in LOGO!. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
A vulnerability has been identified in LOGO!. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Siemens LOGO!. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.