High severity7.5NVD Advisory· Published Dec 14, 2020· Updated Jun 17, 2026
CVE-2020-25232
CVE-2020-25232
Description
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.
Affected products
2- Range: <V8.3
- Siemens/LOGO! 8 BM (incl. SIPLUS variants)v5Range: All versions < V8.3
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-480824.pdfnvdVendor Advisory
News mentions
0No linked articles in our index yet.