Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:logo!_8_bm_(incl._siplus_variants):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductLogo! 8 Bm (Incl. Siplus Variants) (e4870adf-6b74-5ca1-8066-a63059ed430e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-36360 vulnerable 2026-06-08 05:46:07.070969 Details available
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Affected devices load firmware updates without checking the authenticity. Furthermore the integrity of the unencrypted firmware is only verified by a non-cryptographic method. This could allow an attacker to manipulate a firmware update and flash it to the device.
Published: 2022-10-11T00:00:00.000Z
Updated: 2024-08-03T10:00:04.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7589 vulnerable 2026-06-08 05:27:13.719430 Details available
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 135/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.
Published: 2020-06-10T16:24:57.000Z
Updated: 2024-08-04T09:33:19.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25235 vulnerable 2026-06-08 05:22:36.587826 Details available
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins.
Published: 2020-12-14T21:05:19.000Z
Updated: 2024-08-04T15:33:05.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25234 vulnerable 2026-06-08 05:22:36.587320 Details available
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.
Published: 2020-12-14T21:05:19.000Z
Updated: 2024-08-04T15:33:05.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25233 vulnerable 2026-06-08 05:22:36.586807 Details available
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). The firmware update of affected devices contains the private RSA key that is used as a basis for encryption of communication with the device.
Published: 2020-12-14T21:05:19.000Z
Updated: 2024-08-04T15:33:05.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25232 vulnerable 2026-06-08 05:22:36.586223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25231 vulnerable 2026-06-08 05:22:36.582174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25230 vulnerable 2026-06-08 05:22:36.581700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25229 vulnerable 2026-06-08 05:22:36.581239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25228 vulnerable 2026-06-08 05:22:36.579210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10921 vulnerable 2026-06-08 05:12:25.542714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10920 vulnerable 2026-06-08 05:12:25.542158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10919 vulnerable 2026-06-08 05:12:25.540223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12735 vulnerable 2026-06-08 05:08:47.539920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12734 vulnerable 2026-06-08 05:08:47.537642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.