CVE-2019-6571: Buffer Overflow
First published: Wed Jun 12 2019(Updated: )
A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02). An attacker with network access to port 10005/tcp of the LOGO! device could cause a Denial-of-Service condition by sending specially crafted packets. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected service. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.
Credit: productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Logo!8 Firmware | >=1.80.00<=1.81.00 | |
| Siemens Logo! 8 | ||
| Siemens Logo!8 Firmware | <1.82.00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-6571.
What is the severity of CVE-2019-6571?
The severity of CVE-2019-6571 is high with a severity score of 7.5.
What is affected by CVE-2019-6571?
SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx) and SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02) are affected by CVE-2019-6571.
How can an attacker exploit CVE-2019-6571?
An attacker with network access to port 10005/tcp of the LOGO! device could cause a Denial-of-Service (DoS) condition.
Is there a fix for CVE-2019-6571?
Yes, upgrading the firmware to versions V1.82.02 or higher resolves the vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/siemens
- canonical/siemens logo!8 firmware
- version/siemens logo!8 firmware/1.80.00
- version/siemens logo!8 firmware/1.81.00
- canonical/siemens logo! 8