CVE-2017-12740: Siemens Logo! Soft Comfort

Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while performing a Man-in-the-Middle (MitM) attack.

Affected products

• Siemens Logo! Soft Comfort: before 8.2 (fixed in 8.2)

Published 2017-12-26. Last modified 2026-06-17.