Описание
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.
Ссылки
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:siemens:sinumerik_integrate_access_mymachine\/ethernet:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinumerik_integrate_operate_client:2.0.3.00.016:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinumerik_integrate_operate_client:3.0.4.00.032:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinumerik_operate:4.5:sp6:*:*:*:*:*:*
cpe:2.3:a:siemens:sinumerik_operate:4.7:sp2:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.0024
Низкий
7.4 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-693
CWE-200
Связанные уязвимости
CVSS3: 7.4
github
больше 3 лет назад
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.
EPSS
Процентиль: 47%
0.0024
Низкий
7.4 High
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-693
CWE-200