Siemens Logo! 8 Bm Firmware vulnerabilities

16 CVEs affecting Siemens Logo! 8 Bm Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36363, published 2022-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7593, published 2020-07-14. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer…
CVE-2020-7589, published 2020-06-10. Critical severity, CVSS 9.1. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project…
CVE-2020-25228, published 2020-12-14. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all…
CVE-2020-25235, published 2020-12-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a…
CVE-2017-12735, published 2017-08-30. High severity, CVSS 7.4. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could…
CVE-2022-36361, published 2022-10-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO!…
CVE-2022-36362, published 2022-10-11. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions),…
CVE-2020-25232, published 2020-12-14. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic…
CVE-2020-25229, published 2020-12-14. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to…
CVE-2022-36363, published 2022-10-11. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO!…

Latest

CVE-2022-36360, published 2022-10-11. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of…
CVE-2020-25236, published 2021-03-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO!…
CVE-2020-25234, published 2020-12-14. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected…
CVE-2020-25233, published 2020-12-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for…
CVE-2020-25231, published 2020-12-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The encryption of program data for the affected devices uses…