SecuriTricks - CVE-2025-40816

Description

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable.

Product(s) Impacted

Vendor	Product	Versions
Siemens	Logo! 12/24rce Logo! 12/24rceo Logo! 230rce Logo! 230rceo Logo! 24ce Logo! 24ceo Logo! 24rce Logo! 24rceo Siplus Logo! 12/24rce Siplus Logo! 12/24rceo Siplus Logo! 230rce Siplus Logo! 230rceo Siplus Logo! 24ce Siplus Logo! 24ceo Siplus Logo! 24rce Siplus Logo! 24rceo	* * * * * * * * * * * * * * * *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	siemens	logo!_12/24rce	/	/	/	/	/	/	/	/
a	siemens	logo!_12/24rceo	/	/	/	/	/	/	/	/
a	siemens	logo!_230rce	/	/	/	/	/	/	/	/
a	siemens	logo!_230rceo	/	/	/	/	/	/	/	/
a	siemens	logo!_24ce	/	/	/	/	/	/	/	/
a	siemens	logo!_24ceo	/	/	/	/	/	/	/	/
a	siemens	logo!_24rce	/	/	/	/	/	/	/	/
a	siemens	logo!_24rceo	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_12/24rce	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_12/24rceo	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_230rce	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_230rceo	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_24ce	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_24ceo	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_24rce	/	/	/	/	/	/	/	/
a	siemens	siplus_logo!_24rceo	/	/	/	/	/	/	/	/

References

https://cert-portal.siemens.com/productcert/html/ssa-267056.html

CVSS Score

7.2 / 10

CVSS Data - 4.0

Attack Vector: ADJACENT
Attack Complexity: LOW
Attack Requirements: NONE
Privileges Required: NONE
User Interaction: NONE
Scope:
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: HIGH
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

View Vector String

Timeline

Published: Nov. 11, 2025, 9:15 p.m.
Last Modified: Nov. 12, 2025, 4:19 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

productcert@siemens.com

CVE-2025-40816