CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2020-25229
High (7.5) in siemens logo\! 8 bm firmware. EPSS 0.6% chance of exploitation in the next 30 days.
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-798, CWE-321
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:logo\!_8_bm_firmware