CVE-2020-25229CWE-321

A vulnerability has been identified in LOGO!

published December 14, 2020

CVSS
—
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00647 · 50.4th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2020-12-14T21:05Z
EPSS history
Timeline
  • 14 DEC 21:05Z
    A vulnerability has been identified in LOGO!
    cvelistv5