Buffer overflow in Siemens Logo\! 8 Bm
CVE-2020-7593
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticated attacker could send a specially crafted HTTP request to cause a memory corruption, potentially resulting in remote code execution.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.087 (95.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 95.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.091 · newest: 0.087 · change: -0.003
Affected products
- Siemens Logo\! 8 Bm
- Siemens Logo\! 8 Bm Firmware — versions 1.82.01, 1.82.02
- Siemens Ag Logo! 8 Bm (Incl. Siplus Variants) — versions V1.81.01 - V1.81.03, V1.82.01, V1.82.02
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-573753.pdf (Vendor Advisory)
- www.talosintelligence.com/vulnerability_reports/TALOS-2020-1069 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-7593?
- CVE-2020-7593 is a critical-severity vulnerability in Siemens Logo\! 8 Bm, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 9.8/10. Published 2020-07-14.
- How severe is CVE-2020-7593?
- Critical severity. CVSS v3 base score is 9.8 out of 10.