Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6r57-5896-f6f4

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.7
CVSS3: 8.1

Описание

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.

EPSS

Процентиль: 7%
0.0003
Низкий

7.7 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 8.1
nvd
2 месяца назад

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.

CVSS3: 8.1
fstec
2 месяца назад

Уязвимость инженерного программного обеспечения SICAM TOOLBOX II, связанная с некорректной проверкой сертификата, позволяющая нарушителю реализовать атаку типа «человек посередине»

EPSS

Процентиль: 7%
0.0003
Низкий

7.7 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-295