Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2020-25228: A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all ser...
CVE-2020-25228 · published 5 years ago
Summary
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has acc...
What to do
- Update siemens logo\!_8_bm_firmware to version 8.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| siemens | logo\!_8_bm_firmware |
< 8.3 cpe:2.3:o:siemens:logo\!_8_bm_firmware:*:*:*:*:*:*:*:* |
Original advisory text
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all ser...
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access to this service. The system manual recommends to protect access to this port.
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published14 Dec 2020
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-25228 · NVD
Track software like this
Free during beta