CVE-2020-7589

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions. The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated...

CVE-2020-7593

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants V1.81.01 - V1.81.03, LOGO! 8 BM incl. SIPLUS variants V1.82.01, LOGO! 8 BM incl. SIPLUS variants V1.82.02. A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticated attacke...

CISA Releases 18 Industrial Control Systems Advisories

CISA released 18 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-317-01 Mitsubishi Electric MELSEC iQ-F Series ICSA-25-317-02 AVEVA Application Server IDE ICSA-25-317-03...

EUVD-2019-2635

Malware in sbrugna...

EUVD-2019-2634

Malware in sbrugna...

EUVD-2019-2633

Malware in sbrugna...

EUVD-2020-17918

Malware in sbrugna...

EUVD-2020-28714

Malware in sbrugna...

EUVD-2020-17920

Malware in sbrugna...

EUVD-2019-16130

Malware in sbrugna...

EUVD-2020-17919

Malware in sbrugna...

EUVD-2020-17921

Malware in sbrugna...

EUVD-2020-17922

Malware in sbrugna...

EUVD-2020-17923

Malware in sbrugna...

EUVD-2017-4273

Malware in sbrugna...

EUVD-2017-4274

Malware in sbrugna...

EUVD-2022-39075

Malicious code in bioql PyPI...

CVE-2022-36360

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker t...

CVE-2020-25229

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any...

CVE-2020-25233

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device...