Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
SiemensLogo! 8 Bm Firmware

16 matches found

CVE
CVE•added 2022/10/11 11:15 a.m.•60 views

CVE-2022-36361

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! ...

9.8CVSS9.6AI score0.00418EPSS
CVE
CVE•added 2020/06/10 5:15 p.m.•57 views

CVE-2020-7589

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated at...

9.1CVSS8.9AI score0.00354EPSS
CVE
CVE•added 2017/08/30 7:29 p.m.•53 views

CVE-2017-12735

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potentially decrypt and modify network traffic.

7.4CVSS7.2AI score0.0024EPSS
CVE
CVE•added 2022/10/11 11:15 a.m.•51 views

CVE-2022-36360

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an att...

7.5CVSS7.3AI score0.00144EPSS
CVE
CVE•added 2022/10/11 11:15 a.m.•48 views

CVE-2022-36362

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), ...

7.5CVSS7.7AI score0.0016EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•43 views

CVE-2020-25228

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has...

10CVSS9.3AI score0.00445EPSS
CVE
CVE•added 2022/10/11 11:15 a.m.•43 views

CVE-2022-36363

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! ...

5.3CVSS5.6AI score0.00522EPSS
CVE
CVE•added 2021/03/15 5:15 p.m.•41 views

CVE-2020-25236

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! ...

5.5CVSS5.5AI score0.00103EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•40 views

CVE-2020-25233

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device.

5.5CVSS5.3AI score0.00063EPSS
CVE
CVE•added 2020/07/14 2:15 p.m.•39 views

CVE-2020-7593

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticat...

9.8CVSS9.8AI score0.17292EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•37 views

CVE-2020-25234

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected w...

7.7CVSS7.3AI score0.00121EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•35 views

CVE-2020-25230

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an outdated cipher mode on port 10005/tcp, an attacker could extract the encryption key from a captured communication with the device.

7.5CVSS7.3AI score0.001EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•34 views

CVE-2020-25232

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on...

7.5CVSS7.3AI score0.00187EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•32 views

CVE-2020-25229

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on an...

7.5CVSS7.4AI score0.00153EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•32 views

CVE-2020-25231

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protect...

5.5CVSS5.2AI score0.00063EPSS
CVE
CVE•added 2020/12/14 9:15 p.m.•32 views

CVE-2020-25235

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins.

7.5CVSS7.5AI score0.00311EPSS