CVE-2022-36360CWE-345

CVE-2022-36360: falha em Siemens LOGO! 8 BM (incl. SIPLUS variants)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar LOGO! 8 BM

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device.
Produtos afetados
Siemens · LOGO! 8 BM (incl. SIPLUS variants)
CVEs relacionadas — Siemens LOGO! 8 BM (incl. SIPLUS variants)

No mesmo produto, das mais perigosas para as menos.

CVE-2019-10919—CVE-2019-10919EPSS 2.7%CVE-2019-10921—CVE-2019-10921EPSS 2.4%CVE-2020-7589—CVE-2020-7589EPSS 2.0%CVE-2020-25228—CVE-2020-25228EPSS 1.6%CVE-2019-10920—CVE-2019-10920EPSS 1.5%CVE-2017-12734—CVE-2017-12734EPSS 1.5%