Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m83f-px8c-c623

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.

EPSS

Процентиль: 36%
0.00153
Низкий

7.5 High

CVSS3

Дефекты

CWE-294
CWE-321
CWE-798

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any affected device if using prepared messages that were generated for another device.

EPSS

Процентиль: 36%
0.00153
Низкий

7.5 High

CVSS3

Дефекты

CWE-294
CWE-321
CWE-798