Electromagnetic Fault Injection Vulnerability in Siemens LOGO! Products
CVE-2022-42784

7.6HIGH

Key Information:

Vendor

Siemens
Status
Logo! 12/24rce
Logo! 12/24rceo
Logo! 230rce
Logo! 230rceo
Vendor
CVE Published:
12 December 2023

What is CVE-2022-42784?

A vulnerability has been identified in Siemens LOGO! devices, allowing attackers to exploit electromagnetic fault injection. This allows them to dump and debug firmware, manipulate memory, and inject public keys for custom key pairs that can be signed by the product's certificate authority. Consequently, attackers can create custom certificates, facilitating unauthorized communication with and impersonation of other devices running the same version.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

LOGO! 12/24RCE V8.3

LOGO! 12/24RCEo V8.3

LOGO! 230RCE V8.3

References

https://cert-portal.siemens.com/productcert/pdf/ssa-84458...
https://cert-portal.siemens.com/productcert/html/ssa-8445...

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.