What’s Vulnerable › Vulnerabilities

CVE-2017-12735

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-30 · updated 2026-06-17
• Weakness: CWE-300

Description

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic.

Affected products

• Siemens LOGO! 8 BM (incl. SIPLUS variants): before 8.3 — fixed in 8.3

How to fix

Upgrade to a fixed version: Siemens LOGO! 8 BM (incl. SIPLUS variants) 8.3. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/100561
• https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf
• http://www.securityfocus.com/bid/100561
• https://cert-portal.siemens.com/productcert/pdf/ssa-087240.pdf

Get alerted when CVE-2017-12735 or the next vulnerability affects your stack