Siemens LOGO! 8 BM Missing Authentication For Critical Function (CVE-2020-25228)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access...

CVE-2020-25228

CVE-2020-25228 affects Siemens LOGO! 8 BM (incl. SIPLUS variants) with all versions prior to 8.3. The issue is Missing Authentication for Critical Function on a service reachable at port 10005/tcp, enabling an attacker with access to that service to gain full control of the device and access all ...