VYPR

Logo\!8 Bm Firmware

by Siemens Foundation

CVEs (3)

  • CVE-2019-10919CriMay 14, 2019
    risk 0.61cvss 9.4epss 0.03

    A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port.…

  • CVE-2019-10921HigMay 14, 2019
    risk 0.49cvss 7.5epss 0.02

    A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited…

  • CVE-2019-10920HigMay 14, 2019
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an…