DLL Hijacking Vulnerability in LOGO! Soft Comfort by Siemens
CVE-2020-25244

8.4HIGH

Key Information:

Vendor

Siemens
Status
Logo! Soft Comfort
Vendor
CVE Published:
22 April 2021

What is CVE-2020-25244?

A vulnerability in LOGO! Soft Comfort affects all versions of the software, allowing insecure library loading which could be exploited through DLL hijacking. If a local attacker successfully manipulates this flaw, they could gain unauthorized access, potentially taking control of the compromised system. It is crucial for users to address this vulnerability to safeguard their installations against exploitation.

Affected Version(s)

LOGO! Soft Comfort All versions < V8.4

References

https://cert-portal.siemens.com/productcert/pdf/ssa-98330...
x_refsource_MISC

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.