---
id: CVE-2025-40815
title: >-
  A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2)
  (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions
  < V1.84.05), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions < V1.84.05),
  LOGO! 230R…
summary: >-
  A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2)
  (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions
  < V1.84.05), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions < V1.84.05),
  LOGO! 230R…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-120
published: '2025-11-11'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T10:17:13.417'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-40815'
references:
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-267056.html'
    label: productcert@siemens.com
tags:
  - nvd
  - cve.org
epss: 0.0038
epssPercentile: 0.31816
ingestedAt: '2026-10-13T10:22:03.514Z'
vendor: Siemens
product: LOGO! 12/24RCE
affected:
  - logo_12_24rce < V1.84.05
  - logo_12_24rceo < V1.84.05
  - logo_230rce < V1.84.05
  - logo_230rceo < V1.84.05
  - logo_24ce < V1.84.05
  - logo_24ceo < V1.84.05
  - logo_24rce < V1.84.05
  - logo_24rceo < V1.84.05
  - siplus_logo_12_24rce < V1.84.05
  - siplus_logo_12_24rceo < V1.84.05
  - siplus_logo_230rce < V1.84.05
  - siplus_logo_230rceo < V1.84.05
  - siplus_logo_24ce < V1.84.05
  - siplus_logo_24ceo < V1.84.05
  - siplus_logo_24rce < V1.84.05
  - siplus_logo_24rceo < V1.84.05
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-11-12T18:25:57.878232Z'
---

## Overview

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions < V1.84.05), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions < V1.84.05), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions < V1.84.05), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions < V1.84.05), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions < V1.84.05), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions < V1.84.05), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions < V1.84.05), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions < V1.84.05), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions < V1.84.05). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.