1. Home
  2. CVE Database
  3. CVE-2022-42784
HIGH · 7.6

CVE-2022-42784

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All v...

Vulnerability Description

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Siemens6Ed1052-1Md08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-1Md08-0Ba1-
Siemens6Ed1052-2Md08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-2Md08-0Ba1-
Siemens6Ed1052-1Cc08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-1Cc08-0Ba1-
Siemens6Ed1052-2Cc08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-2Cc08-0Ba1-
Siemens6Ed1052-1Hb08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-1Hb08-0Ba1-
Siemens6Ed1052-2Hb08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-2Hb08-0Ba1-
Siemens6Ed1052-1Fb08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-1Fb08-0Ba1-
Siemens6Ed1052-2Fb08-0Ba1 Firmware<= 8.3
Siemens6Ed1052-2Fb08-0Ba1-
Siemens6Ag1052-1Md08-7Ba1 Firmware<= 8.3
Siemens6Ag1052-1Md08-7Ba1-
Siemens6Ag1052-2Md08-7Ba1 Firmware<= 8.3
Siemens6Ag1052-2Md08-7Ba1-

Related Weaknesses (CWE)

CWE-1319

References

FAQ

What is CVE-2022-42784?

CVE-2022-42784 is a vulnerability with a CVSS score of 7.6 (HIGH). A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All v...

How severe is CVE-2022-42784?

CVE-2022-42784 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-42784?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens 6Ed1052-1Md08-0Ba1 Firmware, Siemens 6Ed1052-1Md08-0Ba1, Siemens 6Ed1052-2Md08-0Ba1 Firmware, Siemens 6Ed1052-2Md08-0Ba1, Siemens 6Ed1052-1Cc08-0Ba1 Firmware.