Vulnerability in Siemens Logo! 8 Bm (Incl. Siplus Variants)

CVE-2020-25229

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker co…

EPSS: 0.002 (35.8th percentile) — read the EPSS interpretation.

Affected products

Siemens Logo! 8 Bm (Incl. Siplus Variants) — versions All versions < V8.3

Weakness classification (CWE)

CWE-321 — Use of Hard-coded Cryptographic Key

References

cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf (x_refsource_MISC)