CVE-2020-7589

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions). The vulnerability could lead to an attacker reading and modifying the device configuration and obtain project files from affected devices. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 135/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

• CWE-306
• CWE-306

• https://cert-portal.siemens.com/productcert/pdf/ssa-817401.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-161-03Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-817401.pdfVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-161-03Third Party Advisory, US Government Resource

Published

Jun 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7583A vulnerability has been identified in Automation License Ma…7.8
• CVE-2020-7584A vulnerability has been identified in SIMATIC S7-200 SMART …7.5
• CVE-2020-7585A vulnerability has been identified in SIMATIC PCS 7 V8.2 an…7.8
• CVE-2020-7586A vulnerability has been identified in SIMATIC PCS 7 V8.2 an…7.8
• CVE-2020-7587A vulnerability has been identified in Opcenter Execution Di…8.2
• CVE-2020-7588A vulnerability has been identified in Opcenter Execution Di…5.3
• CVE-2020-7590A vulnerability has been identified in DCA Vantage Analyzer …6.8
• CVE-2020-7591A vulnerability has been identified in SIPORT MP (All versio…8.8
• CVE-2020-7592A vulnerability has been identified in SIMATIC HMI Basic Pan…6.5
• CVE-2020-7593A vulnerability has been identified in LOGO! 8 BM (incl. SIP…9.8
• CVE-2020-7594MultiTech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 devices …7.2
• CVE-2020-7595xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has…7.5