CVE-2020-25235: Siemens LOGO! 8 BM (incl. SIPLUS variants)

Описание

Оригинално описание

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins.

Засегнати продукти

• Siemens LOGO! 8 BM (incl. SIPLUS variants): All versions < V8.3

Вид слабост

• CWE-522 Недостатъчно защитени удостоверителни данни

История

Други уязвимости в Siemens LOGO! 8 BM (incl. SIPLUS variants)

• CVE-2022-36360
• CVE-2020-25233
• CVE-2020-25234
• CVE-2020-25232
• CVE-2020-25228

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-25235
• https://nvd.nist.gov/vuln/detail/CVE-2020-25235
• https://cert-portal.siemens.com/productcert/pdf/ssa-480824.pdf