CVE-2025-40816A vulnerability has been identified in LOGO!
Updated under an hour ago ()
Does this affect you?
It affects Siemens LOGO! 12/24RCE and 15 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions < V1.84.05), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions < V1.84.05), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions < V1.84.05), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions < V1.84.05), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions < V1.84.05), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions < V1.84.05), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions < V1.84.05). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable.
- CVSS
- 7.6 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- Weakness (CWE)
- CWE-306
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- siemens
- NVD analysis
- Deferred
- Record last updated
- Oct 13, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Siemens LOGO! 12/24RCE siemens:logo_12_24rce (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 12/24RCEo siemens:logo_12_24rceo (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 230RCE siemens:logo_230rce (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 230RCEo siemens:logo_230rceo (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 24CE siemens:logo_24ce (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 24CEo siemens:logo_24ceo (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 24RCE siemens:logo_24rce (from the name) | before V1.84.05 | CNA record |
Siemens LOGO! 24RCEo siemens:logo_24rceo (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 12/24RCE siemens:siplus_logo_12_24rce (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 12/24RCEo siemens:siplus_logo_12_24rceo (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 230RCE siemens:siplus_logo_230rce (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 230RCEo siemens:siplus_logo_230rceo (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 24CE siemens:siplus_logo_24ce (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 24CEo siemens:siplus_logo_24ceo (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 24RCE siemens:siplus_logo_24rce (from the name) | before V1.84.05 | CNA record |
Siemens SIPLUS LOGO! 24RCEo siemens:siplus_logo_24rceo (from the name) | before V1.84.05 | CNA record |
References
- https://cert-portal.siemens.com/productcert/html/ssa-267056.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.