CVE-2020-25232

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM (incl. SIPLUS variants) versions prior to V8.3

Description A security issue has been identified due to the use of an insecure random number generation function and a deprecated cryptographic function. This could allow an attacker to extract the key used for communication with an affected device on port 8080/tcp.

Recommendations For versions prior to V8.3, update to version V8.3 or later to resolve the issue. As a temporary workaround, consider restricting access to port 8080/tcp to minimize the risk of exploitation.