Read the docs
TI-2025-27261 Aliases CVE-2025-40816GHSA-7cqh-gq37-64w3

Missing authentication in Siemens LOGO! 12/24RCE

Priority LOW 31CWE-306Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
Low · Low · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions < V1.84.05), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions < V1.84.05), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions < V1.84.05), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions < V1.84.05), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions < V1.84.05), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions < V1.84.05), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions < V1.84.05). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00219 12th percentileScored 2026-11-07
Fix Fixed LOGO! 12/24RCE (Siemens): V1.84.05LOGO! 12/24RCEo (Siemens): V1.84.05+14 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensLOGO! 12/24RCEbefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 12/24RCEobefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 230RCEbefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 230RCEobefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 24CEbefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 24CEobefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 24RCEbefore V1.84.05V1.84.05Patch availableCNA
SiemensLOGO! 24RCEobefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 12/24RCEbefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 12/24RCEobefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 230RCEbefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 230RCEobefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 24CEbefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 24CEobefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 24RCEbefore V1.84.05V1.84.05Patch availableCNA
SiemensSIPLUS LOGO! 24RCEobefore V1.84.05V1.84.05Patch availableCNA
  • LOGO! 12/24RCE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 12/24RCEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 230RCE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 230RCEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 24CE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 24CEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 24RCE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • LOGO! 24RCEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 12/24RCE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 12/24RCEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 230RCE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 230RCEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 24CE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 24CEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 24RCE VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA
  • SIPLUS LOGO! 24RCEo VendorSiemens Affected before V1.84.05 Fixed in V1.84.05 Patch available CNA

Remediation

  • Fix · CNA LOGO! 12/24RCE (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 12/24RCEo (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 230RCE (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 230RCEo (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 24CE (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 24CEo (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 24RCE (Siemens) Fixed in V1.84.05
  • Fix · CNA LOGO! 24RCEo (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 12/24RCE (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 12/24RCEo (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 230RCE (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 230RCEo (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 24CE (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 24CEo (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 24RCE (Siemens) Fixed in V1.84.05
  • Fix · CNA SIPLUS LOGO! 24RCEo (Siemens) Fixed in V1.84.05

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo and 14 more products V1.84.05

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2025-27260 Buffer overflow in Siemens LOGO! 12/24RCEPriority LOW 39
    • TI-2025-27262 Missing authentication in Siemens LOGO! 12/24RCEPriority LOW 31
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-40816
  2. 2026-10-03 Alias added: GHSA-7cqh-gq37-64w3
  3. 2026-10-13 Title updated · CNA
  4. 2026-10-13 Fix available: Siemens/LOGO! 12/[email protected], Siemens/LOGO! 12/[email protected], Siemens/LOGO! [email protected] +13 · CNA

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences