Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Better late than never 😉 Our latest advisory covers CVE-2024-31853 & CVE-2024-31854 in #Siemens SICAM Toolbox II, where improper certificate validation could enable AiTM attacks ✅Fixed in V07.11+. 🔎 Technical details and PoC: https://r.sec-consult.com/toolbox #CyberSecurity https://t.co/IDaT2fyn4I
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | siemens | sicam_toolbox_ii | - | - | - |