Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qf34-j4vq-q329

Опубликовано: 15 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.

A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.

EPSS

Процентиль: 34%
0.00136
Низкий

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.4
nvd
около 4 лет назад

A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.

EPSS

Процентиль: 34%
0.00136
Низкий

Дефекты

CWE-295