CVE-2020-25229 Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants)
Attackers can modify device configuration or change passwords via replay attacks due to static encryption keys in Siemens LOGO! 8 BM devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-25229?
CVE-2020-25229 is a high-severity vulnerability in Siemens LOGO! 8 BM (incl. SIPLUS variants), published on 14 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.
Which versions are affected by CVE-2020-25229?
It affects 1 product.
Products include Siemens Logo\! 8 Bm Firmware.
How do I fix CVE-2020-25229?
No fix has been published for CVE-2020-25229 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-25229 being exploited?
There is no known exploitation of CVE-2020-25229 in the wild and no public exploit code.
Other vulnerabilities in Siemens LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-25228 Missing authorization in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-7593 Memory corruption in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-7589 Missing authorization in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-25234 Hardcoded credentials in LOGO! 8 BM (incl. SIPLUS variants)
- CVE-2020-25230 Weak cryptography in LOGO! 8 BM (incl. SIPLUS variants)
Sources
Also known as GHSA-m83f-px8c-c623.