A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesnt check devices certificate common name against an expected value. This could allow an attacker to execute an on-path network (MitM) attack.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sicam_toolbox_ii | Siemens | * | 07.11 (excluding) |