CVE-2020-25231
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - productcert@siemens.com
- Published
- 2020-12-14
- Last modified
- 2024-08-04
- Weaknesses
- CWE-321, CWE-798
Affected products
- Logo! 8 Bm Firmware (Siemens)
- Logo! Soft Comfort (Siemens)
- Logo 8 Bm Incl. Siplus Variants (Siemens)
- Logo Soft Comfort (Siemens)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf
