description: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticated attacker could send a specially crafted HTTP request to cause a memory corruption, potentially resulting in remote code execution.
problem types: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
product: LOGO! 8 BM (incl. SIPLUS variants)
vendor: Siemens AG
versions:
status: affected, version: V1.81.01 - V1.81.03
}
{
product: LOGO! 8 BM (incl. SIPLUS variants)
vendor: Siemens AG
versions:
status: affected, version: V1.82.01
}
{
product: LOGO! 8 BM (incl. SIPLUS variants)
vendor: Siemens AG
versions:
status: affected, version: V1.82.02
}
