Buffer Overflow Vulnerability in Siemens LOGO! Automation Products

CVE-2022-36361

What is CVE-2022-36361?

A significant vulnerability exists in Siemens LOGO! automation products, where improper validation of TCP packet structures can lead to buffer overflow conditions. This flaw could enable an attacker to manipulate the instruction counter and execute arbitrary code remotely, posing severe security risks to the operational integrity of affected devices. Organizations using these products should be aware of this risk and take necessary precautions to mitigate potential threats.

References