CVE-2020-25243CWE-22

A vulnerability has been identified in LOGO!

Medium · published April 22, 2021

CVSS v3.1
5.1
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file

to the affected software. Chained with other vulnerabilities this vulnerability could

ultimately lead to a system takeover by an attacker.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-04-22T20:42Z
EPSS history
Timeline
  • 22 APR 20:42Z
    A vulnerability has been identified in LOGO!
    cvelistv5