What is the severity of CVE-2020-25234?

CVE-2020-25234 is classified as a medium severity vulnerability due to the potential for unauthorized access to user-defined functions.

How do I fix CVE-2020-25234?

To mitigate CVE-2020-25234, upgrade to LOGO! 8 BM firmware version 8.3 or later.

What software versions are affected by CVE-2020-25234?

CVE-2020-25234 affects all versions of LOGO! 8 BM and LOGO! Soft Comfort software prior to version 8.3.

Can CVE-2020-25234 be exploited remotely?

Yes, CVE-2020-25234 could be exploited remotely if the affected software is exposed to the internet.

What are the consequences of CVE-2020-25234?

Exploitation of CVE-2020-25234 may lead to unauthorized access to protected user-defined functions and compromise the device's integrity.

Vulnerability/
CVE-2020-25234

high

7.7

CWE

321

14/12/2020

4/8/2024

CVE-2020-25234

First published: Mon Dec 14 2020(Updated: )

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.

Credit: productcert@siemens.com

Affected Software	Affected Version	How to fix
Siemens Logo\! 8 Bm Firmware	<8.3
Siemens Logo\! 8 Bm

Never miss a vulnerability like this again

Reference Links

https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf

Frequently Asked Questions

What is the severity of CVE-2020-25234?
CVE-2020-25234 is classified as a medium severity vulnerability due to the potential for unauthorized access to user-defined functions.
How do I fix CVE-2020-25234?
To mitigate CVE-2020-25234, upgrade to LOGO! 8 BM firmware version 8.3 or later.
What software versions are affected by CVE-2020-25234?
CVE-2020-25234 affects all versions of LOGO! 8 BM and LOGO! Soft Comfort software prior to version 8.3.
Can CVE-2020-25234 be exploited remotely?
Yes, CVE-2020-25234 could be exploited remotely if the affected software is exposed to the internet.
What are the consequences of CVE-2020-25234?
Exploitation of CVE-2020-25234 may lead to unauthorized access to protected user-defined functions and compromise the device's integrity.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/references
agent/severity
agent/last-modified-date
agent/weakness
agent/description
agent/first-publish-date
agent/event
agent/tags
agent/source
vendor/siemens
canonical/siemens logo\! 8 bm firmware
canonical/siemens logo\! 8 bm

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2020-25234?
CVE-2020-25234 is classified as a medium severity vulnerability due to the potential for unauthorized access to user-defined functions.
How do I fix CVE-2020-25234?
To mitigate CVE-2020-25234, upgrade to LOGO! 8 BM firmware version 8.3 or later.
What software versions are affected by CVE-2020-25234?
CVE-2020-25234 affects all versions of LOGO! 8 BM and LOGO! Soft Comfort software prior to version 8.3.
Can CVE-2020-25234 be exploited remotely?
Yes, CVE-2020-25234 could be exploited remotely if the affected software is exposed to the internet.
What are the consequences of CVE-2020-25234?
Exploitation of CVE-2020-25234 may lead to unauthorized access to protected user-defined functions and compromise the device's integrity.