CVE-2022-42784 (GCVE-0-2022-42784)

Vulnerability from cvelistv5 – Published: 2023-12-12 10:02 – Updated: 2024-10-08 08:39
VLAI?
Summary
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.
Severity ?
7.6 (High)
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
CWE
  • CWE-1319 - Improper Protection against Electromagnetic Fault Injection (EM-FI)
Assigner
References
Impacted products
Vendor Product Version
Siemens LOGO! 12/24RCE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 12/24RCEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 230RCE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 230RCEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 24CE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 24CEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 24RCE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens LOGO! 24RCEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 12/24RCE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 12/24RCEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 230RCE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 230RCEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 24CE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 24CEo Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 24RCE Affected: V8.3 , < * (custom)
Create a notification for this product.
    Siemens SIPLUS LOGO! 24RCEo Affected: V8.3 , < * (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:19:04.591Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 12/24RCE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 12/24RCEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 230RCE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 230RCEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 24CE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 24CEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 24RCE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "LOGO! 24RCEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 12/24RCE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 12/24RCEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 230RCE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 230RCEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 24CE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 24CEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 24RCE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS LOGO! 24RCEo",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "V8.3",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions \u003e= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions \u003e= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions \u003e= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions \u003e= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions \u003e= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions \u003e= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions \u003e= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions \u003e= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1319",
              "description": "CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-08T08:39:57.161Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-844582.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-42784",
    "datePublished": "2023-12-12T10:02:37.510Z",
    "dateReserved": "2022-10-11T11:45:41.037Z",
    "dateUpdated": "2024-10-08T08:39:57.161Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-1md08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"49CFFE4D-F33B-4CC7-B7C1-09D4459C148D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-1md08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BF63E523-B73C-40B6-82CD-61F5E9E036BD\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-2md08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"392BF61C-6BDE-4443-96B3-BE43EF075805\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-2md08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"640E9DE7-3BC8-4779-A0FC-D5DE721EC274\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-1cc08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"21A02115-6B04-4D59-B2FF-2980A32795E3\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-1cc08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"13389F1B-C692-4699-AE9C-36BF985ADEEE\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-2cc08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"6B6824CB-8F80-4BF0-A859-C206F4E426A7\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-2cc08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DF138437-1439-442F-BFF3-713C21A74ED9\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-1hb08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"55BBCF0F-F7EA-4707-A06A-91C16BD6A41C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-1hb08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEC8F8E5-40FD-49B9-A0CD-6610F67B4819\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-2hb08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"F1DEC2DB-E951-4E2D-B44C-CBF684F18EE2\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-2hb08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2EC02D7-AE98-4869-B581-678844921EFA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-1fb08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"D9FD5F0A-47A1-45CD-909E-F41CDA4F4B88\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-1fb08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3209F5DB-56FE-48B6-8901-82562B4B4A97\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ed1052-2fb08-0ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"95B302F4-A5D7-4EF1-8AF8-8B687732303F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ed1052-2fb08-0ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D990B231-F468-4329-B4E8-560140EA94F8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-1md08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"8482096D-CD87-4538-8DA5-91B0655AB365\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-1md08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"16B1E9E4-CE26-43BE-844F-E9FB45CF6226\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-2md08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"66AA570A-4991-4A58-8C3B-B34E1D3DCCCE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-2md08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"030718B7-DA0E-40D4-81DE-6089D24EC517\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-1cc08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"AA994549-5EC0-4869-ABA0-6286813BE8EC\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-1cc08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7C3D817-4A6F-473D-8BF6-33F6367FFD11\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-2cc08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"625CC724-188A-412B-A2E2-243470B35C54\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-2cc08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"29930065-2A85-4390-A4A3-462CCCDD7CF3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-1hb08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"32A2500B-5501-46A1-9FEC-63E6F3266F37\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-1hb08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F524805D-724D-410D-88D1-E5960857D2C0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-2hb08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"1499E52D-8CAA-41DC-BE0E-09FAEF7D5E2D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-2hb08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED26BB98-2858-4B93-A919-861B325A1743\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-1fb08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"41DC2572-8CB0-4B0E-B6CC-AE964AE6A4A5\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-1fb08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4F37713D-A17C-43EF-AB20-75C93AFC54DB\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:6ag1052-2fb08-7ba1_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"8.3\", \"matchCriteriaId\": \"F8829195-4956-410F-BFF6-C8AD4F1E3151\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:6ag1052-2fb08-7ba1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4EA89AEC-BF2B-4500-9B3C-8460276AE2C2\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions \u003e= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions \u003e= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions \u003e= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions \u003e= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions \u003e= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions \u003e= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions \u003e= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions \u003e= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.\"}, {\"lang\": \"es\", \"value\": \"Se ha identificado una vulnerabilidad en:\\nLOGO! 12/24RCE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 12/24RCEO (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 230RCE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 230RCEO (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24CE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24CEo (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24RCE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24RCEO (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 12/24RCE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 12/24RCEO (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 230RCE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 230RCEO (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24CE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24CEo (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24RCE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24RCEO (Todas las versiones \u0026gt;= V8.3). \\nLos dispositivos afectados son vulnerables a una inyecci\\u00f3n de falla electromagn\\u00e9tica. Esto podr\\u00eda permitir a un atacante volcar y depurar el firmware, incluida la manipulaci\\u00f3n de la memoria. Otras acciones podr\\u00edan permitir inyectar claves p\\u00fablicas de pares de claves creados personalizados que luego son firmados por la CA del producto. La generaci\\u00f3n de un certificado personalizado permite la comunicaci\\u00f3n y la suplantaci\\u00f3n de cualquier dispositivo de la misma versi\\u00f3n.\"}]",
      "id": "CVE-2022-42784",
      "lastModified": "2024-11-21T07:25:20.120",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"productcert@siemens.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 7.6, \"baseSeverity\": \"HIGH\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 0.9, \"impactScore\": 6.0}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 6.8, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 0.9, \"impactScore\": 5.9}]}",
      "published": "2023-12-12T10:15:09.560",
      "references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-844582.html\", \"source\": \"productcert@siemens.com\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf\", \"source\": \"productcert@siemens.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "productcert@siemens.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"productcert@siemens.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-1319\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-42784\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2023-12-12T10:15:09.560\",\"lastModified\":\"2024-11-21T07:25:20.120\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions \u003e= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions \u003e= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions \u003e= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions \u003e= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions \u003e= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions \u003e= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions \u003e= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions \u003e= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions \u003e= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en:\\nLOGO! 12/24RCE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 12/24RCEO (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 230RCE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 230RCEO (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24CE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24CEo (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24RCE (Todas las versiones \u0026gt;= V8.3), \\nLOGO! 24RCEO (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 12/24RCE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 12/24RCEO (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 230RCE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 230RCEO (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24CE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24CEo (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24RCE (Todas las versiones \u0026gt;= V8.3), \\nSIPLUS LOGO! 24RCEO (Todas las versiones \u0026gt;= V8.3). \\nLos dispositivos afectados son vulnerables a una inyecci\u00f3n de falla electromagn\u00e9tica. Esto podr\u00eda permitir a un atacante volcar y depurar el firmware, incluida la manipulaci\u00f3n de la memoria. Otras acciones podr\u00edan permitir inyectar claves p\u00fablicas de pares de claves creados personalizados que luego son firmados por la CA del producto. La generaci\u00f3n de un certificado personalizado permite la comunicaci\u00f3n y la suplantaci\u00f3n de cualquier dispositivo de la misma versi\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":7.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.9,\"impactScore\":6.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1319\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-1md08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"49CFFE4D-F33B-4CC7-B7C1-09D4459C148D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-1md08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF63E523-B73C-40B6-82CD-61F5E9E036BD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-2md08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"392BF61C-6BDE-4443-96B3-BE43EF075805\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-2md08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"640E9DE7-3BC8-4779-A0FC-D5DE721EC274\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-1cc08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"21A02115-6B04-4D59-B2FF-2980A32795E3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-1cc08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13389F1B-C692-4699-AE9C-36BF985ADEEE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-2cc08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"6B6824CB-8F80-4BF0-A859-C206F4E426A7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-2cc08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF138437-1439-442F-BFF3-713C21A74ED9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-1hb08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"55BBCF0F-F7EA-4707-A06A-91C16BD6A41C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-1hb08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEC8F8E5-40FD-49B9-A0CD-6610F67B4819\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-2hb08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"F1DEC2DB-E951-4E2D-B44C-CBF684F18EE2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-2hb08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2EC02D7-AE98-4869-B581-678844921EFA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-1fb08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"D9FD5F0A-47A1-45CD-909E-F41CDA4F4B88\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-1fb08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3209F5DB-56FE-48B6-8901-82562B4B4A97\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ed1052-2fb08-0ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"95B302F4-A5D7-4EF1-8AF8-8B687732303F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ed1052-2fb08-0ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D990B231-F468-4329-B4E8-560140EA94F8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-1md08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"8482096D-CD87-4538-8DA5-91B0655AB365\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-1md08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16B1E9E4-CE26-43BE-844F-E9FB45CF6226\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-2md08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"66AA570A-4991-4A58-8C3B-B34E1D3DCCCE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-2md08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"030718B7-DA0E-40D4-81DE-6089D24EC517\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-1cc08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"AA994549-5EC0-4869-ABA0-6286813BE8EC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-1cc08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7C3D817-4A6F-473D-8BF6-33F6367FFD11\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-2cc08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"625CC724-188A-412B-A2E2-243470B35C54\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-2cc08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29930065-2A85-4390-A4A3-462CCCDD7CF3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-1hb08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"32A2500B-5501-46A1-9FEC-63E6F3266F37\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-1hb08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F524805D-724D-410D-88D1-E5960857D2C0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-2hb08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"1499E52D-8CAA-41DC-BE0E-09FAEF7D5E2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-2hb08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED26BB98-2858-4B93-A919-861B325A1743\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-1fb08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"41DC2572-8CB0-4B0E-B6CC-AE964AE6A4A5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-1fb08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F37713D-A17C-43EF-AB20-75C93AFC54DB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:6ag1052-2fb08-7ba1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.3\",\"matchCriteriaId\":\"F8829195-4956-410F-BFF6-C8AD4F1E3151\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:6ag1052-2fb08-7ba1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EA89AEC-BF2B-4500-9B3C-8460276AE2C2\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-844582.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-844582.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.