Siemens LOGO! Soft Comfort Hardcoded AES Key and Weak Hashing Vulnerabilities (CVE-2026-57262/CVE-2026-57263)

Vulnerability Overview Vulnerability ID: SSA-751328 Vulnerability Name: Recoverable Hardcoded AES Master Key in Siemens LOGO! Soft Comfort Release Date: 2026-08-11 Last Update: 2026-08-11 Current Version: V1.0 CVSS v3.1 Base Score: 6.8 CVSS v4.0 Base Score: 7.0 Affected Products Affected Product: Siemens LOGO! Soft Comfort Affected Versions: All versions < V9 Affected CVEs: CVE-2026-57262, CVE-2026-57263 Solution Fixed Version: Update to V9 or later Note: Hardware upgrade to LOGO! V9 EM or later is also required to avoid compatibility mode, where this vulnerability persists. Vulnerability Details Vulnerability CVE-2026-57262 Description: The affected product uses a static, hardcoded AES master key to encrypt project files. This allows a local attacker to extract the master key from application files or memory and use it to decrypt project files or remove the project password without knowing the actual user-defined password. CVSS v3.1 Base Score: 6.8 CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS v4.0 Base Score: 7.0 CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/NA:N CWE: CWE-321: Use of Hard-coded Cryptographic Key Vulnerability CVE-2026-57263 Description: Project passwords are stored as unsalted SHA-256 hashes. This allows an attacker to perform effective offline dictionary or brute-force attacks against the hash using obtained project files. CVSS v3.1 Base Score: 6.8 CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS v4.0 Base Score: 7.0 CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/NA:N CWE: CWE-759: Use of a One-Way Hash without a Salt Mitigations Product-specific mitigations or workarounds can be found in the "Known Affected Products" section. Please follow the "General Security Recommendations." General Security Recommendations As a general security measure, Siemens strongly recommends protecting network access to devices using appropriate mechanisms. To strengthen devices in protected IT environments, Siemens recommends configuring the environment according to the Siemens Operational Guidelines (download: https://www.siemens.com/cert/operational-guidelines-industrial-security) and following the recommendations in the product manual. More information on industrial security can be found at https://www.siemens.com/industrialsecurity. Product Description This chapter describes the vulnerabilities (CVE-IDs) addressed in this security advisory. Where applicable, it also documents the document impact for individual vulnerabilities. Acknowledgements Siemens thanks the following parties for their contributions: - Jeroen Sibbe for their contribution to the coordinated disclosure Additional Information For more information on security vulnerabilities in Siemens products and solutions, please contact Siemens ProductCERT: https://www.siemens.com/cert/advisories History V1.0 (2026-08-11) Release Date Terms of Use The use of Siemens security advisories is subject to the listed terms and conditions: https://www.siemens.com/productcertification-terms-of-use

Goal Reached Thanks to every supporter — we hit 100%!

Siemens LOGO! Soft Comfort Hardcoded AES Key and Weak Hashing Vulnerabilities (CVE-2026-57262/CVE-2026-57263)