Lucene search
+L

254 matches found

Tenable Nessus
Tenable Nessus
•added 2023/09/21 12:00 a.m.•23 views

Siemens LOGO! Channel Accessible By Non-Endpoint (CVE-2017-12735)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. An attacker who performs a Man-in- the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic. This plugin only works with Tenable.ot. Please visit...

7.4CVSS7AI score0.01135EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2023/09/21 12:00 a.m.•21 views

Siemens LOGO! Missing Authentication For Critical Function (CVE-2020-7589)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...

9.1CVSS7.8AI score0.0199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/09/21 12:00 a.m.•16 views

Siemens LOGO! 8 BM Plaintext Storage of a Password (CVE-2019-10921)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

7.5CVSS7.3AI score0.02447EPSS
SaveExploits3References7
Packet Storm
Packet Storm
•added 2023/07/17 12:00 a.m.•245 views

BM IT CMS 1.0 Insecure Settings

==================================================================================================================================== | Title : BM IT CMS v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | |...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/07/08 8:19 p.m.•14 views

bm-marcyletoile.fr Cross Site Scripting vulnerability OBB-3492308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/05/21 7:13 p.m.•5 views

bm-bukovel.com Cross Site Scripting vulnerability OBB-3356514

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
CNVD
CNVD
•added 2022/10/13 12:00 a.m.•60 views

Siemens LOGO! 8 BM input validation error vulnerability

A security vulnerability exists in Siemens LOGO! 8 BM, a programming software for the Windows platform used in industrial environments from Siemens, Germany. The vulnerability stems from the inability to properly validate offset values defined in TCP packets when calling methods. An attacker coul...

5.3CVSS2.5AI score0.00428EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/10/13 12:00 a.m.•52 views

Siemens LOGO! 8 BM Input Validation Error Vulnerability (CNVD-2022-89766)

A security vulnerability exists in Siemens LOGO! 8 BM, a programming software for industrial environments for the Windows platform from Siemens, Germany, which stems from the fact that certain authentication is not performed when interacting with them. An unauthenticated remote attacker could...

7.5CVSS2.3AI score0.00942EPSS
SaveExploits0References1
NVD
NVD
•added 2022/10/11 11:15 a.m.•38 views

CVE-2022-36360

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...

7.5CVSS0.00277EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/11 11:15 a.m.•17 views

CVE-2022-36360

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...

7.5CVSS5.7AI score0.00277EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/10/11 11:15 a.m.•7 views

CVE-2022-36360

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...

7.5CVSS7AI score0.00277EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/11 11:15 a.m.•24 views

Design/Logic Flaw

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...

5CVSS7.3AI score0.00277EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•12 views

PT-2022-7651 · Siemens · Logo! 230Rce +7

Name of the Vulnerable Software and Affected Versions: LOGO! 12/24RCE versions 6ED1052-1MD08-0BA1 through 6ED1052-1MD08-0BA2 LOGO! 12/24RCEo versions 6ED1052-2MD08-0BA1 through 6ED1052-2MD08-0BA2 LOGO! 230RCE versions 6ED1052-1FB08-0BA1 through 6ED1052-1FB08-0BA2 LOGO! 230RCEo versions...

7.8CVSS6.9AI score0.00942EPSS
SaveExploits0References9
CVE
CVE
•added 2022/10/11 12:00 a.m.•76 views

CVE-2022-36362

The CVE-2022-36362 entry affects Siemens LOGO! 8 BM and SIPLUS LOGO! devices (and LOGO! 12/24RCE, 230RCE, 24CE/24RCE etc. variants across all versions). The root cause is improper input validation during interaction, allowing an unauthenticated remote attacker to manipulate the device IP address,...

7.5CVSS7.7AI score0.00942EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•92 views

CVE-2022-36360

CVE-2022-36360 affects LOGO! 8 BM (incl. SIPLUS variants) prior to version 8.3. The vulnerability arises because firmware updates are loaded without authenticity checks and the unencrypted firmware integrity is verified only by a non-cryptographic method, enabling manipulation of a firmware updat...

7.5CVSS7.3AI score0.00277EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•93 views

CVE-2022-36361

CVE-2022-36361 affects Siemens LOGO! and SIPLUS LOGO! devices (e.g., LOGO! 12/24RCE, 230RCE, 24CE and related SIPLUS variants, including LOGO! 8 BM per multiple sources). The vulnerability arises from insufficient validation of TCP packet structure in several methods, allowing buffer overflows an...

9.8CVSS9.6AI score0.00979EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/10/11 12:00 a.m.•74 views

CVE-2022-36363

CVE-2022-36363 affects Siemens LOGO! devices (LOGO! 12/24RCE, 230RCE, 24CE and SIPLUS variants). The issue is improper validation of an offset value in TCP packets when calling a method, which could allow an attacker to retrieve parts of memory content. Public sources note the vulnerability is ex...

5.3CVSS5.6AI score0.00428EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•42 views

CVE-2022-36360

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...

7.6AI score0.00277EPSS
SaveExploits0References1
ICS
ICS
•added 2022/10/11 12:00 a.m.•45 views

Siemens LOGO! 8 BM Devices

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment : LOGO! 8 BM Devices Vulnerabilities: Buffer Copy without Checking Size of Input; Improper Input Validation; Improper Validation of Specified Index, Position, or Offset in Input. 2...

9.8CVSS7.9AI score0.00979EPSS
SaveExploits0References10
Openbugbounty
Openbugbounty
•added 2022/09/16 11:32 a.m.•15 views

bm-marcyletoile.fr Cross Site Scripting vulnerability OBB-2925244

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Rows per page
Query Builder