← Back

CVE-2020-7593

nvd nist
Published: Jul 14, 2020Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer overflow vulnerability exists in the Web Server functionality of the device. A remote unauthenticated attacker could send a specially crafted HTTP request to cause a memory corruption, potentially resulting in remote code execution.

Affected (3)

Siemens
1 product
Logo! 8 Bm Firmware
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Siemens
Logo! 8 Bm Firmware
From 1.81.01 to 1.81.03
Logo! 8 Bm Firmware
Version 1.82.01
Logo! 8 Bm Firmware
Version 1.82.02
Running on/withPlatform Versions
Siemens
Logo! 8 Bm
All versions

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (4)

Source: productcert@siemens.com
Vendor Advisory
Source: productcert@siemens.com
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.