high7.4
CVE-2017-2685
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) c…
Impact
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Sinumerik Integrate Access Mymachine\/Ethernet | All versions |
| Siemens | Sinumerik Integrate Operate Client | Versions 2.0.3.00.016, 3.0.4.00.032 |
| Siemens | Sinumerik Operate | Versions 4.5, 4.7 |