CVE-2017-12740

Published: Dic 26, 2017 Last Modified: Apr 20, 2025 EU-VD ID: EUVD-2017-4279 Aliases: GSD-2017-12740
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,9
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: high
Availability: none
MEDIUM 4,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: none
Integrity: partial
Availability: none

Description

AI Translation Available

Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while performing a Man-in-the-Middle (MitM) attack.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0014
Percentile
0,3th
Updated

EPSS Score Trend (Last 90 Days)

345

Insufficient Verification of Data Authenticity

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Other
Potential Impacts:
Varies By Context Unexpected State
Applicable Platforms
Technologies: ICS/OT
View CWE Details
494

Download of Code Without Integrity Check

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Availability Confidentiality Other
Potential Impacts:
Execute Unauthorized Code Or Commands Alter Execution Logic Other
Applicable Platforms
All platforms may be affected
Likelihood of Exploit: Medium
View CWE Details
Application

Logo\! Soft Comfort by Siemens

Product Information
Vendor Siemens
Product Logo\! Soft Comfort
Version Range Affected
To 8.2 (exclusive)
cpe:2.3:a:siemens:logo\!_soft_comfort:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.siemens.com/cert/pool/cert/siemens_security_adv…
Vendor Advisory
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-888929.pdf
https://www.siemens.com/cert/pool/cert/siemens_security_adv…
Vendor Advisory
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-888929.pdf