CVE-2017-12735
Severity Score
7.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic.
Se ha identificado una vulnerabilidad en LOGO! 8 BM (incl. Variantes SIPLUS) (Todas las versiones anteriores a la V8.3). Un atacante que realiza un ataque Man-in-the-Middle entre LOGO! BM y otros dispositivos podrían potencialmente descifrar y modificar el tráfico de la red.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-08-09 CVE Reserved
- 2017-08-30 CVE Published
- 2023-05-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-300: Channel Accessible by Non-Endpoint
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/100561 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf | 2020-12-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Siemens Search vendor "Siemens" | Logo\! 8 Bm Firmware Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" | < 8.3 Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" and version " < 8.3" | - |
Affected
| in | Siemens Search vendor "Siemens" | Logo\! Search vendor "Siemens" for product "Logo\!" | 12\/24rce Search vendor "Siemens" for product "Logo\!" and version "12\/24rce" | - |
Safe
|
| Siemens Search vendor "Siemens" | Logo\! 8 Bm Firmware Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" | < 8.3 Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" and version " < 8.3" | - |
Affected
| in | Siemens Search vendor "Siemens" | Logo\! Search vendor "Siemens" for product "Logo\!" | 24ce Search vendor "Siemens" for product "Logo\!" and version "24ce" | - |
Safe
|
| Siemens Search vendor "Siemens" | Logo\! 8 Bm Firmware Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" | < 8.3 Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" and version " < 8.3" | - |
Affected
| in | Siemens Search vendor "Siemens" | Logo\! Search vendor "Siemens" for product "Logo\!" | 24rce Search vendor "Siemens" for product "Logo\!" and version "24rce" | - |
Safe
|
| Siemens Search vendor "Siemens" | Logo\! 8 Bm Firmware Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" | < 8.3 Search vendor "Siemens" for product "Logo\! 8 Bm Firmware" and version " < 8.3" | - |
Affected
| in | Siemens Search vendor "Siemens" | Logo\! Search vendor "Siemens" for product "Logo\!" | 230rce Search vendor "Siemens" for product "Logo\!" and version "230rce" | - |
Safe
|