Logo! Soft Comfort
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:logo!_soft_comfort:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Logo! Soft Comfort (4caad27e-9927-5b8e-87b3-b10e13f3699a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57263 |
vulnerable | 2026-09-16 04:33:40.305175 |
Details available
MEDIUM (6.8)
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.
Published: 2026-08-11T12:20:22.982Z
Updated: 2026-08-11T14:00:28.936Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57262 |
vulnerable | 2026-09-16 04:33:40.064823 |
Details available
MEDIUM (6.8)
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.
Published: 2026-08-11T12:20:21.896Z
Updated: 2026-08-12T19:20:07.024Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25244 |
vulnerable | 2026-06-08 05:22:36.639339 |
Details available
HIGH (8.4)
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnerable to DLL hijacking.
Successful exploitation by a local attacker could lead to a takeover of the system
where the software is installed.
Published: 2021-04-22T20:42:19.000Z
Updated: 2024-08-04T15:33:05.434Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25243 |
vulnerable | 2026-06-08 05:22:36.638873 |
Details available
MEDIUM (5.1)
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file
to the affected software. Chained with other vulnerabilities this vulnerability could
ultimately lead to a system takeover by an attacker.
Published: 2021-04-22T20:42:19.000Z
Updated: 2024-11-19T15:01:36.881Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25234 |
vulnerable | 2026-06-08 05:22:36.587354 |
Details available
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.
Published: 2020-12-14T21:05:19.000Z
Updated: 2024-08-04T15:33:05.332Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25231 |
vulnerable | 2026-06-08 05:22:36.584305 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10924 |
vulnerable | 2026-06-08 05:12:25.684100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.