Summary
During establishment of a https connection to the TLS server of a managed device, SICAM TOOLBOX II improperly validates that device's certificate.
This could allow an attacker to execute an on-path network (MitM) attack.
Siemens has released a new version for SICAM TOOLBOX II and recommends to update to the latest version.
The chapter "Additional Information" provides additional guidance how to prevent on-path network attacks.
Vulnerabilities 2
-
High 8.1
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connec…
-
High 8.1
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connec…
Revision history
-
#2
Added acknowledgements
-
#1
Publication Date
References
-
SSA-183963: Certificate Validation Vulnerabilities in SICAM TOOLBOX II Before V07.11 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-183963.html