Siemens Logo! Soft Comfort — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Logo! Soft Comfort, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2021-45046 — CVSS 9.0 (critical) — actively exploited: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could…
• CVE-2020-25244 — CVSS 8.4 (high): A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it…
• CVE-2019-10924 — CVSS 7.8 (high): A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.3). The vulnerability could allow an attacker to execute…
• CVE-2017-12740 — CVSS 5.9 (medium): Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected…
• CVE-2020-25231 — CVSS 5.5 (medium): A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3)…
• CVE-2020-25243 — CVSS 5.1 (medium): A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while…