8.1
High
CVE-2024-31853 A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11)
Description
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SICAM TOOLBOX II 07.11 | earliest → < 07.11 | 07.11 |
Other CVEs of SICAM TOOLBOX II
The 5 CVEs of SICAM TOOLBOX II →
CVE-2024-31854
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11)
8.1
High
CVE-2023-38641
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10)
7.8
High
CVE-2022-39062
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10)
7.8
High
CVE-2021-45106
A vulnerability has been identified in SICAM TOOLBOX II (All versions)
Not rated