CVE-2020-25243mediumCWE-22

CVE-2020-25243: medium-severity vulnerability in Siemens LOGO! Soft Comfort

Published · Updated

Follow this CVE+ Monitor LOGO! Soft Comfort

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.3%
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chained with other vulnerabilities this vulnerability could ultimately lead to a system takeover by an attacker.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:U/RC:C
Affected products
Siemens · LOGO! Soft Comfort
Related CVEs — Siemens LOGO! Soft Comfort

In the same product, most dangerous first.

CVE-2019-10924—CVE-2019-10924EPSS 1.3%CVE-2020-25234—CVE-2020-25234EPSS 0.3%CVE-2020-25244HIGHCVE-2020-25244EPSS 0.2%CVE-2020-25231—CVE-2020-25231EPSS 0.2%CVE-2026-57262HIGHCVE-2026-57262EPSS 0.1%CVE-2026-57263HIGHCVE-2026-57263EPSS 0.1%