Siemens LOGO! Soft Comfort

Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling, allowing a local attacker to extract the master key and decrypt project data or remove passwords. These vulnerabilities stem from a hardcoded AES master key and unsalted SHA-256 password hashes, enabling d…