sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2017-12735 Other in LOGO! 8 BM (incl. SIPLUS variants)

High 7.4 Published Updated

An attacker can decrypt and modify network traffic via a Man-in-the-Middle attack on Siemens LOGO! 8 BM devices.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2017-12735?

CVE-2017-12735 is a high-severity vulnerability in Siemens LOGO! 8 BM (incl. SIPLUS variants), published on 30 Aug 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic.

Weakness: CWE-300

Which versions are affected by CVE-2017-12735?

It affects 1 product.

Products include Siemens Logo\! 8 Bm Firmware.

How do I fix CVE-2017-12735?

No fix has been published for CVE-2017-12735 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-12735 being exploited?

There is no known exploitation of CVE-2017-12735 in the wild and no public exploit code.

Sources

Also known as GHSA-qxg4-m824-m377.

Is CVE-2017-12735 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free