IM
IronMonkey Threat Research
‹ Back to ICS Advisories

SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices

HIGH
CVSS 7.6
Date 2026-10-13T00:00:00+00:00
Source siemens-productcert
Published by Siemens ProductCERT

// Description

LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.

// Vulnerabilities (3)

CVE ID CVSS Score Severity Description
CVE-2025-40816 7.6 high
CVE-2025-40816. Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable.
CVE-2025-40815 7.2 high
CVE-2025-40815. Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code.
CVE-2025-40817 6.5 medium
CVE-2025-40817. Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to change time of the device, which means the device could behave differently.

// Remediations (3)

Patch: Update to V1.84.05 or later version
Update to V1.84.05 or later version
Mitigation: Restrict network access to port 10006/udp to trusted IP addresses.
Restrict network access to port 10006/udp to trusted IP addresses.
Mitigation: Restrict network access to port 10006/udp to trusted IP addresses.
Restrict network access to port 10006/udp to trusted IP addresses.

// References