Lucene search

K
cvelistSiemensCVELIST:CVE-2020-25234
HistoryDec 14, 2020 - 9:05 p.m.

CVE-2020-25234

2020-12-1421:05:19
CWE-321
siemens
www.cve.org
4
cve-2020-25234
logo! 8 bm
logo! soft comfort
user-defined functions
password protection
reverse engineering

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

26.0%

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.

CNA Affected

[
  {
    "product": "LOGO! 8 BM (incl. SIPLUS variants)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.3"
      }
    ]
  },
  {
    "product": "LOGO! Soft Comfort",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V8.3"
      }
    ]
  }
]

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

26.0%

Related for CVELIST:CVE-2020-25234