<p>During establishment of a https connection to the TLS server of a managed device, SICAM TOOLBOX II improperly validates that device’s certificate. This could allow an attacker to execute an on-path network (MitM) attack.</p>
<p>Siemens has released a new version for SICAM TOOLBOX II and recommends to update to the latest version.</p>
<p>The chapter “Additional Information” provides additional guidance how to prevent on-path network attacks.</p>
Source link
