CVE-2020-25234

HIGH

7.7

Description

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.

Details CVE

Score CVSS v3.17.7

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/14/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

siemens:logo\!_8_bmsiemens:logo\!_8_bm_firmware

Faiblesses (CWE)

CWE-321

References

https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf(productcert@siemens.com)

https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.