Skip to main content
← All vulnerabilities
CVE-2022-36362

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable and could only be recovered by power cycling the device.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Siemens LOGO! 12/24RCE

    All versions

  • Siemens LOGO! 12/24RCE

    All versions

  • Siemens LOGO! 12/24RCEo

    All versions

  • Siemens LOGO! 12/24RCEo

    All versions

  • Siemens LOGO! 230RCE

    All versions

  • Siemens LOGO! 230RCE

    All versions

  • Siemens LOGO! 230RCEo

    All versions

  • Siemens LOGO! 230RCEo

    All versions

  • Siemens LOGO! 24CE

    All versions

  • Siemens LOGO! 24CE

    All versions

  • Siemens LOGO! 24CEo

    All versions

  • Siemens LOGO! 24CEo

    All versions

  • Siemens LOGO! 24RCE

    All versions

  • Siemens LOGO! 24RCE

    All versions

  • Siemens LOGO! 24RCEo

    All versions

  • Siemens LOGO! 24RCEo

    All versions

  • Siemens SIPLUS LOGO! 12/24RCE

    All versions

  • Siemens SIPLUS LOGO! 12/24RCE

    All versions

  • Siemens SIPLUS LOGO! 12/24RCEo

    All versions

  • Siemens SIPLUS LOGO! 12/24RCEo

    All versions

  • Siemens SIPLUS LOGO! 230RCE

    All versions

  • Siemens SIPLUS LOGO! 230RCE

    All versions

  • Siemens SIPLUS LOGO! 230RCEo

    All versions

  • Siemens SIPLUS LOGO! 230RCEo

    All versions

  • Siemens SIPLUS LOGO! 24CE

    All versions

  • Siemens SIPLUS LOGO! 24CE

    All versions

  • Siemens SIPLUS LOGO! 24CEo

    All versions

  • Siemens SIPLUS LOGO! 24CEo

    All versions

  • Siemens SIPLUS LOGO! 24RCE

    All versions

  • Siemens SIPLUS LOGO! 24RCE

    All versions

  • Siemens SIPLUS LOGO! 24RCEo

    All versions

  • Siemens SIPLUS LOGO! 24RCEo

    All versions

References 2

cert-portal.siemens.com