CVE-2020-25230

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM (incl. SIPLUS variants) versions prior to V8.3

Description A vulnerability has been identified due to the usage of an outdated cipher mode on port 10005/tcp. This allows an attacker to extract the encryption key from a captured communication with the device.

Recommendations For versions prior to V8.3, update to version V8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to port 10005/tcp to minimize the risk of exploitation.