CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2020-25231
Medium (5.5) in siemens. EPSS 0.2% chance of exploitation in the next 30 days.
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-321, CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:logo\!_8_bm_firmware
- siemens:logo\!_soft_comfort