Siemens logo!8 Bm Firmware vulnerabilities

3 CVEs affecting Siemens logo!8 Bm Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-10921, published 2019-05-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10919, published 2019-05-14. Critical severity, CVSS 9.4. EPSS: 2.7% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files…
CVE-2019-10921, published 2019-05-14. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp…
CVE-2019-10920, published 2019-05-14. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a…