CVE-2022-42784

siemens 6ed1052-1md08-0ba1 firmware, siemens 6ed1052-2md08-0ba1 firmware, siemens 6ed1052-1cc08-0ba1 firmware +13 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-42784

Katalog CVE

CVSS 6.8 · Medium EPSS 0,25%

Kerentanan Improper Protection against Electromagnetic Fault Injection (EM-FI) pada siemens 6ed1052-1md08-0ba1 firmware, siemens 6ed1052-2md08-0ba1 firmware +14 lainnya. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.

Rincian

Terbit di NVD
12 Desember 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.8 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)
EPSS (30 hari)
0,25% peluang dieksploitasi; lebih tinggi dari 14,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
siemens 6ed1052-1md08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-2md08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-1cc08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-2cc08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-1hb08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-2hb08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-1fb08-0ba1 firmware Semua versi hingga 8.3
siemens 6ed1052-2fb08-0ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-1md08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-2md08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-1cc08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-2cc08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-1hb08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-2hb08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-1fb08-7ba1 firmware Semua versi hingga 8.3
siemens 6ag1052-2fb08-7ba1 firmware Semua versi hingga 8.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.