CVE-2025-40816CWE-306

CVE-2025-40816

High · published November 12, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

⚡ A sneaky flaw lets anyone with malicious intent divert your LOGO! devices without even breaking a sweat! 🚨 Think of it like a delivery service that blindly trusts any address change. If a delivery driver can simply say, 'Send my package to this new address,' they could reroute critical deliveries without anyone noticing! An attacker could manipulate the IP address of your LOGO! devices, leaving them unreachable and causing chaos in your network. This could be absolutely devastating for operations relying on those devices, disrupting everything from automation systems to production lines!

Put simply

Think of it like a delivery service that blindly trusts any address change. If a delivery driver can simply say, 'Send my package to this new address,' they could reroute critical deliveries without anyone noticing! This vulnerability arises from the devices failing to validate requests properly, allowing an unauthenticated remote attacker to change the device's IP address. All versions of LOGO! 12/24RCE, 230RCE, and their SIPLUS counterparts are affected.

What to do

An attacker could manipulate the IP address of your LOGO! devices, leaving them unreachable and causing chaos in your network. This could be absolutely devastating for operations relying on those devices, disrupting everything from automation systems to production lines! Make sure to patch your devices immediately as there may be a fix available. Evaluate your network security protocols to ensure proper validation of requests. Regularly monitor your device logs for any unauthorized access attempts! You've got this! By following these steps, you’ll be one step closer to securing your devices and your network! 🛡️

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-11-12T02:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 20:20Z
    A vulnerability has been identified in LOGO!
    cvelistv5