Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5fx7-6vcj-vqfc

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.

EPSS

Процентиль: 41%
0.00187
Низкий

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Due to the usage of an insecure random number generation function and a deprecated cryptographic function, an attacker could extract the key that is used when communicating with an affected device on port 8080/tcp.

EPSS

Процентиль: 41%
0.00187
Низкий

Дефекты

CWE-327