Home / Items
Vendor advisorySeverity 7.6 high
SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices
SSA-267056 · Siemens · November 11, 2025
Summary
LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
From Siemens (vendor's own words, quoted), quoted as published. Check the source before acting.
What to do
Protect the LSC access to the device with a strong password.
Update to V1.84.05 or later version
Restrict network access to port 10006/udp to trusted IP addresses.
Vendor fix or mitigation, quoted from the advisory.
Each CVE in this advisory
| CVE | Severity | Known exploited | Exploit likelihood |
|---|---|---|---|
| CVE-2025-40815 | 7.2 high | No | 0.4% |
| CVE-2025-40816 | 7.6 high | No | 0.2% |
| CVE-2025-40817 | 6.5 medium | No | 0.2% |
Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).
Affected products
| Vendor | Product |
|---|---|
| Siemens | LOGO! 12/24RCE (6ED1052-1MD08-0BA2) |
| Siemens | LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) |
| Siemens | LOGO! 230RCE (6ED1052-1FB08-0BA2) |
| Siemens | LOGO! 230RCEo (6ED1052-2FB08-0BA2) |
| Siemens | LOGO! 24CE (6ED1052-1CC08-0BA2) |
| Siemens | LOGO! 24CEo (6ED1052-2CC08-0BA2) |
| Siemens | LOGO! 24RCE (6ED1052-1HB08-0BA2) |
| Siemens | LOGO! 24RCEo (6ED1052-2HB08-0BA2) |
| Siemens | SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) |
| Siemens | SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) |
| Siemens | SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) |
| Siemens | SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) |
| Siemens | SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) |
| Siemens | SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) |
| Siemens | SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) |
| Siemens | SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) |
Why it's on these mode pages
- Maritime: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Pipeline: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Freight rail: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Passenger rail and transit: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Highway and motor carrier: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
- Postal and parcel: Vendor table: Siemens (industrial control makers used in every mode, all modes) (matched by rule)
Change history
- November 11, 2025: Publication Date
- October 13, 2026: Added fix for SIPLUS LOGO! V8.4 BM and LOGO! V8.4 BM families
- November 9, 2026: First collected by Watch
Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com