Siemens, a German multinational conglomerate company headquartered in Munich and the largest industrial manufacturing company in Europe with branch offices abroad.
Recently, the German company’s logo was found to have vulnerabilities that could enable features like Denial of Service (DoS) attacks as well as cause modification of a device’s configuration.
The German industrial giant claims that all versions of its logo are subject to vulnerabilities, as well as SIPLUS, the versions to be used in unusual conditions are also compromised.
Siemens is in the process of and has yet to release any updates on the patches to fix the vulnerabilities. However, the experts at Siemens have initiated to share the defense-in-depth measures with its customers in order to reduce risks.
Siemens claims that the vulnerabilities can read and modify a device’s configuration and access confidential files without the user’s knowledge or efforts.
CVE-2020-7589 was discovered by Cisco’s Talos (threat intelligence and research group) as recognized by Siemens. The discovery has located three missing flaws under the same CVE identifier.
Here’s the advisories published by Cisco’s Talos.