CVEvulnerability

CVE-2022-42784

6.8 MEDIUM Published 2023-12-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1319

Description

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.

Affected configurations

• siemens 6ed1052-1md08-0ba1 firmware (<= 8.3) • siemens 6ed1052-2md08-0ba1 firmware (<= 8.3) • siemens 6ed1052-1cc08-0ba1 firmware (<= 8.3) • siemens 6ed1052-2cc08-0ba1 firmware (<= 8.3) • siemens 6ed1052-1hb08-0ba1 firmware (<= 8.3) • siemens 6ed1052-2hb08-0ba1 firmware (<= 8.3) • siemens 6ed1052-1fb08-0ba1 firmware (<= 8.3) • siemens 6ed1052-2fb08-0ba1 firmware (<= 8.3) • siemens 6ag1052-1md08-7ba1 firmware (<= 8.3) • siemens 6ag1052-2md08-7ba1 firmware (<= 8.3) • siemens 6ag1052-1cc08-7ba1 firmware (<= 8.3) • siemens 6ag1052-2cc08-7ba1 firmware (<= 8.3) • siemens 6ag1052-1hb08-7ba1 firmware (<= 8.3) • siemens 6ag1052-2hb08-7ba1 firmware (<= 8.3) • siemens 6ag1052-1fb08-7ba1 firmware (<= 8.3) • siemens 6ag1052-2fb08-7ba1 firmware (<= 8.3)

Related

Weakness · CWE (1)

  • CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI) weakness

References