HIGH🇵🇱 Wersja polska

CVE-2022-42784

CVSS 7.6v3.1pub. 2023-12-12upd. 2024-11-21

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Siemens 6ag1052 1cc08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 1cc08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 1fb08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 1fb08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 1hb08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 1hb08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 1md08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 1md08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 2cc08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 2cc08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 2fb08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 2fb08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 2hb08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 2hb08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ag1052 2md08 7ba1

    HW
    Siemens
    all versions

  • Siemens 6ag1052 2md08 7ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 1cc08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 1cc08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 1fb08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 1fb08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 1hb08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 1hb08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 1md08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 1md08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 2cc08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 2cc08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 2fb08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 2fb08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3

  • Siemens 6ed1052 2hb08 0ba1

    HW
    Siemens
    all versions

  • Siemens 6ed1052 2hb08 0ba1 Firmware

    OS
    Siemens
    ≤ 8.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-0300CRITICAL9.3⚠ KEVPL ✓same vendor

Buffer overflow RCE z uprawnieniami root w PAN-OS Captive Portal

CVE-2026-24858CRITICAL9.8⚠ KEVPL ✓same vendor

Fortinet – Auth Bypass przez FortiCloud SSO w wielu produktach

CVE-2025-59718CRITICAL9.8⚠ KEVPL ✓same vendor

Fortinet FortiOS/FortiProxy/FortiSwitchManager — Auth Bypass przez SAML

CVE-2022-22965CRITICAL9.8⚠ KEVPL ✓same vendor

Spring4Shell — RCE przez data binding w Spring MVC/WebFlux na JDK 9+

CVE-2021-45046CRITICAL9.0⚠ KEVPL ✓same vendor

Apache Log4j: niekompletna naprawa CVE-2021-44228 — RCE przez JNDI Lookup