Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-100367
HistoryDec 16, 2021 - 12:00 a.m.

SINUMERIK Edge certificate improper validation vulnerability

2021-12-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
siemens
sinumerik edge
certificate validation
software
tls connection
communication
vulnerability

EPSS

0.001

Percentile

42.2%

Siemens SINUMERIK Edge is a combination of hardware and software that provides a machine-oriented system platform for applications that facilitate digital production support and optimization.SINUMERIK Edge Certificate Improper Validation VulnerabilityAffected software does not properly validate server certificates when initiating a TLS connection. An attacker could exploit the vulnerability to spoof a trusted entity by interfering with the communication path between the client and the target server.

EPSS

0.001

Percentile

42.2%

Related for CNVD-2021-100367