Vulnerability Spotlight: Multiple vulnerabilities in Siemens LOGO! PLC
Summary: Cisco Talos researchers found several vulnerabilities in the Siemens LOGO! PLC, a device used to control industrial control systems and other commercial and home automation projects, and worked with Siemens under coordinated disclosure to resolve them. The flaws include unauthenticated denial-of-service and file-write issues in the TDE service and a web server memory corruption bug, and Siemens later patched CVE-2020-7593, which carries a severity score of 10 out of 10 and allows remote code execution.
What's compelling: One of these flaws, CVE-2020-7593, scores a full 10 out of 10 and lets an attacker run code on the device, and the other issues can be triggered by unauthenticated packets - so anyone who can reach a LOGO! PLC on the network is a potential entry point into the automation it controls.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-7589CVE-2020-7593
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026