CVE-2020-7593 - A vulnerability has been identified in LOGO! 8 BM (incl

Back Back to CVE browser

CRITICAL

A vulnerability has been identified in LOGO! 8 BM (incl

Published Jul 14, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 8.72%

Description

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticated attacker could send a specially crafted HTTP request to cause a memory corruption, potentially resulting in remote code execution.

Affected products

Vendor Siemens AG Product LOGO! 8 BM (incl. SIPLUS variants) Default
n/a
- Version
  V1.81.01 - V1.81.03
  Status
  affected
  Constraints
  -
- Version
  V1.82.01
  Status
  affected
  Constraints
  -
- Version
  V1.82.02
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens AG

LOGO! 8 BM (incl. SIPLUS variants)

n/a

Version	Status	Constraints
V1.81.01 - V1.81.03	affected	-
V1.82.01	affected	-
V1.82.02	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

https://cert-portal.siemens.com/productcert/pdf/ssa-573753.pdf
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28718
Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1069
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/pdf/ssa-573753.pdf		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28718		Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1069		x_refsource_MISCExploitThird Party Advisory