CVE-2020-25234CWE-321

A vulnerability has been identified in LOGO!

published December 14, 2020

CVSS
—
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.5th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2020-12-14T21:05Z
EPSS history
Timeline
  • 14 DEC 21:05Z
    A vulnerability has been identified in LOGO!
    cvelistv5