Skip to content
5.5 Medium

CVE-2020-25236 A vulnerability has been identified in LOGO!

Description

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). The control logic (CL) the LOGO! 8 executes could be manipulated in a way that could cause the device executing the CL to improperly handle the manipulation and crash. After successful execution of the attack, the device needs to be manually reset.

Affected products and versions

Product Affected versions Fixed in
LOGO! 12/24RCE Versions not published
LOGO! 12/24RCEo Versions not published
LOGO! 230RCE Versions not published
LOGO! 230RCEo Versions not published
LOGO! 24CE Versions not published
LOGO! 24CEo Versions not published
LOGO! 24RCE Versions not published
LOGO! 24RCEo Versions not published
SIPLUS LOGO! 12/24RCE Versions not published
Show the 7 other branches
Product Affected versions Fixed in
SIPLUS LOGO! 12/24RCEo Versions not published
SIPLUS LOGO! 230RCE Versions not published
SIPLUS LOGO! 230RCEo Versions not published
SIPLUS LOGO! 24CE Versions not published
SIPLUS LOGO! 24CEo Versions not published
SIPLUS LOGO! 24RCE Versions not published
SIPLUS LOGO! 24RCEo Versions not published
The 9 CVEs of LOGO! 12/24RCE →
Track this CVE