Siemens LOGO! 8 BM Plaintext Storage of a Password (CVE-2019-10921)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

Siemens LOGO! 8 Recoverable Password Format Vulnerability

Due to storing passwords in a recoverable format on Siemens LOGO! 8 PLCs, an attacker can gain access to configured passwords as cleartext. Siemens LOGO! 8 Recoverable Password Format Vulnerability Product: LOGO! Manufacturer: Siemens Affected Versions: LOGO! 8 all versions Tested Versions: LOGO!...

Siemens LOGO! 8 Recoverable Password Format

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-014 Product: LOGO! Manufacturer: Siemens Affected Versions: LOGO! 8 all versions Tested Versions: LOGO! 8, 6ED1052-2MD00-0BA8 FS:03, 0BA8.Standard V1.08.03 Vulnerability Type: Storing Passwords in a Recoverable Format CWE-257...

CVE-2019-10921

CVE-2019-10921 affects Siemens LOGO! 8 BM (incl. SIPLUS) with all versions prior to 8.3. The issue is plaintext storage of passwords in the project, allowing an unauthenticated attacker with network access to port 10005/tcp to obtain device passwords, impacting confidentiality. Public exploit det...