Firmware Manipulation Vulnerability in LOGO! 8 BM by Siemens
CVE-2022-36360
7.5HIGH
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 11 October 2022
What is CVE-2022-36360?
A vulnerability exists in LOGO! 8 BM and its SIPLUS variants that allows for the loading of firmware updates without proper authentication checks. The integrity of the firmware, which is unencrypted, is only validated through a basic, non-cryptographic method. This deficiency enables attackers to potentially manipulate and upload malicious firmware updates to the device, leading to unauthorized control and possible disruption of services.
Affected Version(s)
LOGO! 8 BM (incl. SIPLUS variants) All versions < V8.3