Lucene search

K
cvelistSiemensCVELIST:CVE-2020-25232
HistoryDec 14, 2020 - 9:05 p.m.

CVE-2020-25232

2020-12-1421:05:19
CWE-327
siemens
www.cve.org
4
vulnerability
logo! 8 bm
random number
cryptographic function
port 8080/tcp

EPSS

0.001

Percentile

48.0%

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.

CNA Affected

[
  {
    "product": "LOGO! 8 BM (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.3"
      }
    ]
  }
]

EPSS

0.001

Percentile

48.0%

Related for CVELIST:CVE-2020-25232