A vulnerability has been identified in LOGO! 8 BM (incl.... · CVE-2020-25231 · GitHub Advisory Database · GitHub

A vulnerability has been identified in LOGO! 8 BM (incl....

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program files.

References

Published by the National Vulnerability Database

Dec 14, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023

Weaknesses

CWE-321

Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered. Learn more on MITRE.

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Learn more on MITRE.