Risk | Low |
Patch available | NO |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2017-12735 |
CWE-ID | CWE-300 |
Exploitation vector | Network |
Public exploit | Public exploit code for vulnerability #1 is available. |
Vulnerable software Subscribe |
LOGO! Hardware solutions / Firmware |
Vendor | Siemens |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU8048
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:T/RC:C]
CVE-ID: CVE-2017-12735
CWE-ID:
CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform man-in-the-middle attack.
The weakness exists due to improper permissions and access controls. A remote attacker with network access to the integrated web server on port 80/tcp can obtain the session ID of an active user session.
Siemens recommends applying the following mitigations for customers with existing
installations, and for mitigation of the second vulnerability:
- Configure the environment according to the recommendations in the user manual;
- Apply cell protection concept;
- Use VPN for protecting network communication between cells;
- Apply Defense-in-Depth.
LOGO!: All versions
CPE2.3 External linkshttp://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-087240.pdf
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.