PT-2020-5922 · Siemens · Logo! 8 Bm

Alexander Perez-Palma + 1 · Published 2020-06-10 · Updated 2020-12-23 · CVE-2020-7589

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: LOGO! 8 BM (incl. SIPLUS variants) (All versions)

Description: A vulnerability has been identified that could allow an attacker to read and modify the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 135/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication, no public exploitation of this security vulnerability was known.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2021-02034

CVE-2020-7589

Affected Products

Logo! 8 Bm

References · 7

• https://cert-portal.siemens.com/productcert/pdf/ssa-817401.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02034 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-7589 · Security Note
• https://us-cert.gov/ics/advisories/icsa-20-161-03 · Note
• https://t.me/cybersecuritytechnologies/1242 · Telegram Post
• https://t.me/cvenotify/7641 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-161-03 · Note