Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-57262 1 Siemens 1 Logo! Soft Comfort 2026-08-12 6.8 Medium
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.
CVE-2026-57263 1 Siemens 1 Logo! Soft Comfort 2026-08-12 6.8 Medium
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force attacks against the unsalted hash.