CVE-2020-25228CWE-306

A vulnerability has been identified in LOGO!

published December 14, 2020

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

🚨 Guess what? Port 10005/tcp is like an open invitation for trouble on LOGO! 8 BM devices! Anyone with access could waltz right in and control everything without breaking a sweat! 🔥 Think of it like a hotel with an unguarded backdoor that lets anyone walk straight into the lobby. No check-in required, just a friendly wave and you're in! An attacker could gain complete control over critical device functions, leading to unauthorized changes, data leaks, or even service disruptions. It's like handing over the keys to your house without realizing someone could redecorate your living room!

Put simply

Think of it like a hotel with an unguarded backdoor that lets anyone walk straight into the lobby. No check-in required, just a friendly wave and you're in! This vulnerability allows attackers to access all services on devices running versions earlier than V8.3, simply by connecting to port 10005/tcp. A lack of authorization means that anyone who connects can control the device.

What to do

An attacker could gain complete control over critical device functions, leading to unauthorized changes, data leaks, or even service disruptions. It's like handing over the keys to your house without realizing someone could redecorate your living room! Immediately implement access controls for port 10005/tcp to prevent unauthorized connections. Upgrade to version V8.3 or later to patch this vulnerability and secure your device. Don't forget to review your network security policies! You've got this! Secure your devices and keep the bad guys out! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01640 · 76.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2020-12-14T21:05Z
EPSS history
Timeline
  • 14 DEC 21:05Z
    A vulnerability has been identified in LOGO!
    cvelistv5