CVE-2019-10921

Vulnerability

The vulnerability affects LOGO! 8 BM including SIPLUS variants in all versions prior to V8.3. The device stores passwords for the project in an unencrypted format. An attacker with network access to port 10005/tcp can retrieve these passwords from the device without any authentication [1].

Exploitation

An unauthenticated attacker with network connectivity to the device's port 10005/tcp can obtain the stored plaintext passwords. No user interaction is required, and the attacker does not need any prior access or credentials. The exploit can be carried out by simply connecting to the open port and retrieving the project data [1].

Impact

Successful exploitation leads to the disclosure of device passwords, compromising the confidentiality of the device. The attacker could potentially use the recovered passwords to gain further access or perform unauthorized configuration changes, but the primary impact is information disclosure [1].

Mitigation

Siemens has released firmware version V8.3 which addresses this vulnerability by implementing encrypted storage of passwords. Users should update to V8.3 or later. If updating is not possible, restrict network access to port 10005/tcp to trusted hosts only as a workaround. No public exploitation was known at the time of publication [1].