CVE-2020-7589

CVE-2020-7589 is a critical vulnerability affecting all versions of Siemens LOGO! 8 BM (including SIPLUS variants) that allows an unauthenticated attacker with network access to port 135/tcp to read and modify device configurations and obtain project files. This vulnerability has a CVSS score of 9.1 (CRITICAL) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, requiring no user interaction. While there is no known public exploitation or readily available exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, indicating awareness despite its inactive status on the CISA KEV catalog.