Vulnerabilities > CVE-2020-25233 - Use of Hard-coded Cryptographic Key vulnerability in Siemens Logo! 8 BM Firmware

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
siemens
CWE-321

Summary

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device.

Common Weakness Enumeration (CWE)