PT-2022-6139

Name of the Vulnerable Software and Affected Versions Advantech iView affected versions not specified Description The issue is related to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code. The vulnerability is associated with incorrect...

CVE-2020-25232

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...

Design/Logic Flaw

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...

CVE-2020-25232

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...

CVE-2020-25232

CVE-2020-25232 affects Siemens LOGO! 8 BM (incl. SIPLUS variants) — all versions prior to 8.3. The vulnerability arises from using an insecure random number generation function and a deprecated cryptographic function, which could allow an attacker to extract the communication key used with the de...

CVE-2020-25232: Use of a Broken or Risky Cryptographic Algorithm

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port...

PT-2020-16029

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A security issue has been identified due to the use of an insecure random number generation function and a deprecated cryptographic function. This could allow an attacker to...

Cross site scripting

A non-privileged user of the Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting XSS attack, potentially resulting in obtaining administrative permissions...

PT-2017-15470

Name of the Vulnerable Software and Affected Versions Siemens RUGGEDCOM NMS versions prior to V1.2 Description A non-privileged user of the Siemens web application could perform a persistent Cross-Site Scripting XSS attack on port 8080/TCP and 8081/TCP, potentially resulting in obtaining...

CVE-2017-2682: Cross-Site Request Forgery (CSRF)

The Siemens web application RUGGEDCOM NMS V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery CSRF attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to...