Replay Attack Vulnerability in LOGO! 8 BM by Siemens

CVE-2020-25229

What is CVE-2020-25229?

A vulnerability within the LOGO! 8 BM product family from Siemens has been discovered, revealing risks associated with its encryption method for communication. This vulnerability is primarily due to the reliance on a static encryption key, which can be exploited through replay attacks. Attackers can intercept and reuse communication messages intended for one device, allowing them to gain unauthorized access and modify configurations or change passwords on affected devices. This flaw affects all versions prior to V8.3, including the SIPLUS variants, highlighting the importance of updating to a secure version to mitigate potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References