← CVE Intelligence

CVE-2025-40815

Siemens / LOGO! 12/24RCE PUBLISHED

Description (CNA)

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions < V1.84.05), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions < V1.84.05), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions < V1.84.05), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions < V1.84.05), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions < V1.84.05), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions < V1.84.05), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions < V1.84.05). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code.

Affected (CNA)

Vendor / productVersions
Siemens / LOGO! 12/24RCEaffected 0 before V1.84.05
Siemens / LOGO! 12/24RCEoaffected 0 before V1.84.05
Siemens / LOGO! 230RCEaffected 0 before V1.84.05
Siemens / LOGO! 230RCEoaffected 0 before V1.84.05
Siemens / LOGO! 24CEaffected 0 before V1.84.05
Siemens / LOGO! 24CEoaffected 0 before V1.84.05
Siemens / LOGO! 24RCEaffected 0 before V1.84.05
Siemens / LOGO! 24RCEoaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 12/24RCEaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 12/24RCEoaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 230RCEaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 230RCEoaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 24CEaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 24CEoaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 24RCEaffected 0 before V1.84.05
Siemens / SIPLUS LOGO! 24RCEoaffected 0 before V1.84.05

CWE

CWE-120

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.