Skip to content
OpenAdvisories
High SSA-729965 1 CVE

SSA-729965: TLS Certificate Validation Vulnerability in SINUMERIK Integrate Operate Client

Published Jul 13, 2021 · Updated Jul 13, 2021

Vendor: Siemens Product: SINUMERIK Analyse MyCondition Product: SINUMERIK Analyze MyPerformance Product: SINUMERIK Analyze MyPerformance /OEE-Monitor Product: SINUMERIK Analyze MyPerformance /OEE-Tuning Product: SINUMERIK Integrate Client 02 Product: SINUMERIK Integrate Client 03 Product: SINUMERIK Integrate Client 04 Product: SINUMERIK Integrate for Production 4.1 Product: SINUMERIK Integrate for Production 5.1 Product: SINUMERIK Manage MyMachines Product: SINUMERIK Manage MyMachines /Remote Product: SINUMERIK Manage MyMachines /Spindel Monitor Product: SINUMERIK Manage MyPrograms Product: SINUMERIK Manage MyResources /Programs Product: SINUMERIK Manage MyResources /Tools Product: SINUMERIK Manage MyTools Product: SINUMERIK Operate V4.8 Product: SINUMERIK Operate V4.93 Product: SINUMERIK Operate V4.94 Product: SINUMERIK Optimize MyProgramming /NX-Cam Editor

Summary

The latest update for SINUMERIK Integrate Operate Client fixes a vulnerability that could allow an attacker to spoof any SSL server certificate and conduct man-in-the-middle attacks.

Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References