PT-2020-16031 · Siemens · Logo! 8 Bm+1

Published 2020-12-14 · Updated 2020-12-16 · CVE-2020-25234

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM (incl. SIPLUS variants) versions prior to V8.3 LOGO! Soft Comfort versions prior to V8.3

Description A vulnerability has been identified that allows an attacker to reverse engineer user-defined functions (UDFs) directly from stored program files, despite the UDFs being password protected. The protection is implemented in the software that displays the information.

Recommendations For LOGO! 8 BM (incl. SIPLUS variants) versions prior to V8.3, update to version V8.3 or later to resolve the issue. For LOGO! Soft Comfort versions prior to V8.3, update to version V8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the stored program files to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2020-25234

Affected Products

Logo! 8 Bm

Logo! Soft Comfort

References · 3

• https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25234 · Security Note