Siemens LOGO! CMR and SIMATIC RTU 3000

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker with access to any of the interfaces of an affected device to impact the availability or to communicate with invalid certificates.

CVEs (2)

Remediations

• For LOGO! CMR2020, Siemens recommends affected users update to v2.2 or later.
• For LOGO! CMR2040, Siemens recommends affected users update to v2.2 or later.
• For the SIMATIC RTU 3000 family, Siemens recommends affected users use the certificate projection feature to pin the valid certificates of external servers providing services to the RTU/CMR devices. Refer to the product manual for further information.

Affected Vendors

Affected Products (3)

Affected Sectors

Critical Manufacturing