PT-2020-16031

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 LOGO! Soft Comfort versions prior to V8.3 Description A vulnerability has been identified that allows an attacker to reverse engineer user-defined functions UDFs directly from stored...

CVE-2020-25233: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device...

PT-2020-16027

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A vulnerability has been identified due to the usage of an outdated cipher mode on port 10005/tcp. This allows an attacker to extract the encryption key from a captured...

PT-2020-16032

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A security issue has been identified where the password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker wi...

PT-2020-16029

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A security issue has been identified due to the use of an insecure random number generation function and a deprecated cryptographic function. This could allow an attacker to...

PT-2020-16026

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A security issue has been identified where the encryption used for communication with affected devices is susceptible to replay attacks due to a static key. This could allow a...

CVE-2020-25231: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3, LOGO! Soft Comfort All versions V8.3. The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program fil...

PT-2020-16030

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A vulnerability has been identified where the firmware update of affected devices contains the private RSA key used for encrypting communication with the device. This issue...

CVE-2020-25230: Use of a Broken or Risky Cryptographic Algorithm

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device...

PT-2020-16028

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 LOGO! Soft Comfort versions prior to V8.3 Description A vulnerability has been identified where the encryption of program data for the affected devices uses a static key. An attacker coul...

PT-2020-16025

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A vulnerability has been identified that could allow complete access to all services without authorization via a service available on port 10005/tcp. This could enable an...

CVE-2020-25229: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any...

Siemens LOGO! 8 BM Information Disclosure Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. Siemens LOGO! 8 BM is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to make unauthorized password or configuration changes to any...

Siemens LOGO! 8 BM License Issue Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM. An attacker could exploit the vulnerability to gain unauthorized full access to all services...

SIEMENS LOGO! 8 BM Critical Functions Missing Certification Vulnerability

SIEMENS LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in SIEMENS LOGO! 8 BM, which can be exploited by an attacker who has access to specific services to gain unauthorized full access to all services...

Siemens LOGO! 8 BM Hardcoded Encryption Key Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM, which can be exploited by an attacker to obtain a private RSA key used to encrypt communications with a device, resulting ...

Siemens LOGO! 8 BM Improper Encryption Algorithm Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM, which can be exploited by an attacker to gain unauthorized full access to all services...

Siemens LOGO! 8 BM Static Key Replay Attack Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM. An attacker could exploit this vulnerability by performing a replay attack to make unauthorized changes to passwords or...

Siemens LOGO! 8 BM Credentials Insufficient Protection Vulnerability

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM. The vulnerability arises from the fact that an attacker accessing network traffic could obtain a valid login, which could ...

An unspecified vulnerability exists in Siemens LOGO! 8 BM.

Siemens LOGO! 8 BM is a programming software for industrial environments for the Windows platform from Siemens Germany. A security vulnerability exists in Siemens LOGO! 8 BM that could be exploited by an attacker to extract cryptographic keys from communications with the device...