Siemens LOGO! Series Devices Time Manipulation Vulnerability

A vulnerability exists in multiple Siemens LOGO! series devices, including the LOGO! 12/24RCE, LOGO! 230RCE, LOGO! 24CE, and their SIPLUS variants. All versions of these products are affected. The vulnerability arises because the devices fail to perform proper validations during interactions, allowing an unauthenticated remote attacker to alter the device's time. This manipulation could lead to unintended changes in the device's behavior.

Impact

Exploitation of this vulnerability allows for unauthorized time changes on the affected devices, potentially causing them to operate incorrectly.

Remediation

Users are advised to restrict network access to port 10006/udp to trusted IP addresses. For product-specific remediations or mitigations, refer to the Siemens Security Advisory SSA-267056.