A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). Affected devices do not properly validate an offset value which can be defined in TCP packets when calling a method. This could allow an attacker to retrieve parts of the content of the memory.
References
Link | Resource |
---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-955858.pdf | Patch Vendor Advisory |
Information
Published : 2022-10-11 04:15
Updated : 2022-10-12 06:34
NVD link : CVE-2022-36363
Mitre link : CVE-2022-36363
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
siemens
- logo\!8_bm_fs-05
- logo\!8_bm
- logo\!_8_bm_firmware
- logo\!8_bm_fs-05_firmware