CVE-2017-12734
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with network access to the integrated web server on port 80/tcp could obtain the session ID of an active user session. A user must be logged in to the web interface. Siemens recommends to use the integrated webserver on port 80/tcp only in trusted networks.
Se ha identificado una vulnerabilidad en LOGO! 8 BM (incl. Variantes SIPLUS) (todas las versiones anteriores a V1.81.2). Un atacante con acceso de red al servidor web integrado en el puerto 80/tcp podría obtener la ID de sesión de una sesión de usuario activa. Un usuario debe iniciar sesión en la interfaz web. Siemens recomienda utilizar el servidor web integrado en el puerto 80/tcp solo en redes de confianza.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-08-09 CVE Reserved
- 2017-08-30 CVE Published
- 2023-05-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-895: SFP Primary Cluster: Information Leak
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/100560 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf | 2022-01-04 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Logo\!8 Bm Fs-05 Firmware Search vendor "Siemens" for product "Logo\!8 Bm Fs-05 Firmware" | <= 1.81.1 Search vendor "Siemens" for product "Logo\!8 Bm Fs-05 Firmware" and version " <= 1.81.1" | - |
Affected
| in | Siemens Search vendor "Siemens" | Logo\!8 Bm Fs-05 Search vendor "Siemens" for product "Logo\!8 Bm Fs-05" | - | - |
Safe
|