Vulnerability Description
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Logo\! 8 Bm Firmware | < 8.3 |
| Siemens | Logo\! 8 Bm | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdfVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdfVendor Advisory
FAQ
What is CVE-2020-25229?
CVE-2020-25229 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to th...
How severe is CVE-2020-25229?
CVE-2020-25229 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-25229?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Logo\! 8 Bm Firmware, Siemens Logo\! 8 Bm.