PT-2020-16030 · Siemens · Logo! 8 Bm

Published 2020-12-14 · Updated 2020-12-16 · CVE-2020-25233

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM (incl. SIPLUS variants) versions prior to V8.3

Description A vulnerability has been identified where the firmware update of affected devices contains the private RSA key used for encrypting communication with the device. This issue affects the encryption basis of the device's communication.

Recommendations For versions prior to V8.3, update the firmware to version V8.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2020-25233

Affected Products

Logo! 8 Bm

References · 4

• https://osv.dev/vulnerability/CVE-2020-25233 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25233 · Security Note
• https://t.me/cibsecurity/20783 · Telegram Post