CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 8 november 2026 om 07:47.
Filters
1 actief1 advisories gevonden
Gepubliceerd
11 augustus 2026
Laatste update
13 augustus 2026
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove project passwords. The lack of password salting enables offline dictionary or brute-force attacks against the password hashes. Successful exploitation could result in unauthorized access to, or modification of, sensitive project logic and configurations. Siemens has released a new version for LOGO! Soft Comfort and recommends to update to the latest version.
Mitigatiesamenvatting
Update to V9 or later version Note: A hardware upgrade to LOGO! V9 BM or later is also required to avoid compatibility mode, in which the vulnerabilities addressed by this advisory remain present.
Revisiegeschiedenis (2)
Initiële publicatie — 11 augustus 2026
Publication Date
Update A — 13 augustus 2026
Initial CISA Republication of Siemens ProductCERT SSA-751328 advisory