Към съдържанието
Търсене

CVE-2022-36362: Siemens LOGO! 12/24RCE, невалидиран вход

7.5

CVSS 3.1

1,0%

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

    Описание

    Оригинално описание

    A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable and could only be recover

    Засегнати продукти

    • Siemens LOGO! 12/24RCE: All versions
    • Siemens LOGO! 12/24RCE: All versions
    • Siemens LOGO! 12/24RCEo: All versions
    • Siemens LOGO! 12/24RCEo: All versions
    • Siemens LOGO! 230RCE: All versions
    • Siemens LOGO! 230RCE: All versions
    • Siemens LOGO! 230RCEo: All versions
    • Siemens LOGO! 230RCEo: All versions
    • Siemens LOGO! 24CE: All versions
    • Siemens LOGO! 24CE: All versions
    • Siemens LOGO! 24CEo: All versions
    • Siemens LOGO! 24CEo: All versions
    • Siemens LOGO! 24RCE: All versions
    • Siemens LOGO! 24RCE: All versions
    • Siemens LOGO! 24RCEo: All versions
    • Siemens LOGO! 24RCEo: All versions
    • Siemens SIPLUS LOGO! 12/24RCE: All versions
    • Siemens SIPLUS LOGO! 12/24RCE: All versions
    • Siemens SIPLUS LOGO! 12/24RCEo: All versions
    • Siemens SIPLUS LOGO! 12/24RCEo: All versions
    • Siemens SIPLUS LOGO! 230RCE: All versions
    • Siemens SIPLUS LOGO! 230RCE: All versions
    • Siemens SIPLUS LOGO! 230RCEo: All versions
    • Siemens SIPLUS LOGO! 230RCEo: All versions
    • Siemens SIPLUS LOGO! 24CE: All versions
    • Siemens SIPLUS LOGO! 24CE: All versions
    • Siemens SIPLUS LOGO! 24CEo: All versions
    • Siemens SIPLUS LOGO! 24CEo: All versions
    • Siemens SIPLUS LOGO! 24RCE: All versions
    • Siemens SIPLUS LOGO! 24RCE: All versions
    • Siemens SIPLUS LOGO! 24RCEo: All versions
    • Siemens SIPLUS LOGO! 24RCEo: All versions

    Вид слабост

    История

    • 11 октомври 2022 Публикувано

    Други уязвимости в Siemens LOGO! 12/24RCE

    Първоизточници

    CVE-2022-36362: Siemens LOGO! 12/24RCE, невалидиран вход | freedomonline.bg