CyberRota Analysis
AI-GeneratedLOGO! Soft Comfort versions prior to V9 are vulnerable due to the use of a static, hardcoded AES master key for encrypting project files. This flaw enables local attackers to extract the master key, potentially allowing them to decrypt sensitive project files or bypass user-defined passwords. Organizations using this software should prioritize addressing this vulnerability to protect their project data from unauthorized access.
Original NVD Description
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or remove project passwords entirely without knowing the actual user-defined password.