8.1
Élevée
CVE-2024-31853 A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11)
Description
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SICAM TOOLBOX II 07.11 | premières → < 07.11 | 07.11 |
Autres CVE de SICAM TOOLBOX II
Les 5 CVE de SICAM TOOLBOX II →
CVE-2024-31854
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11)
8.1
Élevée
CVE-2023-38641
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10)
7.8
Élevée
CVE-2022-39062
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10)
7.8
Élevée
CVE-2021-45106
A vulnerability has been identified in SICAM TOOLBOX II (All versions)
Non notée