CVE-2017-12734

CVE-2017-12734 is a vulnerability affecting all versions of Siemens LOGO! 8 BM (including SIPLUS variants) prior to V1.81.2. An attacker with network access to the integrated web server on port 80/tcp can obtain the session ID of an active user session, provided a user is already logged into the web interface. This vulnerability has a CVSS v3.1 score of 7.5 (HIGH), indicating a high severity due to its network attack vector and low attack complexity, potentially leading to a compromise of confidentiality. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one mention and one article found.