Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-25228

Опубликовано: 14 дек. 2020
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access to this service. The system manual recommends to protect access to this port.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:siemens:logo\!_8_bm_firmware:*:*:*:*:*:*:*:*
Версия до 8.3 (исключая)
cpe:2.3:h:siemens:logo\!_8_bm:-:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.00445
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-306

Связанные уязвимости

github
больше 3 лет назад

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices could allow complete access to all services without authorization. An attacker could gain full control over an affected device, if he has access to this service. The system manual recommends to protect access to this port.

EPSS

Процентиль: 63%
0.00445
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-306