Siemens LOGO!8 BM Service Port 10005 hard-coded credentials

Summaryinfo

A vulnerability classified as critical has been found in Siemens LOGO!8 BM. This issue affects some unknown processing of the component Service Port 10005. The manipulation leads to hard-coded credentials. This vulnerability is traded as CVE-2019-10920. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply restrictive firewalling.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Siemens LOGO!8 BM (version now known). This issue affects some unknown processing of the component Service Port 10005. The manipulation with an unknown input leads to a hard-coded credentials vulnerability. Using CWE to declare the problem leads to CWE-798. The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability has been identified in LOGO!8 BM (All versions). Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

The bug was discovered 05/14/2019. The weakness was shared 05/14/2019 (Website). The advisory is shared at securityfocus.com. The identification of this vulnerability is CVE-2019-10920 since 04/08/2019. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1110.001 for this issue.

Addressing this vulnerability is possible by firewalling tcp/10005.

The entries VDB-135030 and VDB-135028 are related to this item. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Siemens

Name

• LOGO!8 BM

License

• commercial

Website

• Vendor: https://www.siemens.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion