Vulnerabilities > CVE-2020-25233 - Use of Hard-coded Cryptographic Key vulnerability in Siemens Logo! 8 BM Firmware

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
siemens
CWE-321

Summary

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device.

Common Weakness Enumeration (CWE)