Lucene search
SiemensCVELIST:CVE-2021-40366HistoryNov 09, 2021 - 11:32 a.m.
CVE-2021-40366
2021-11-0911:32:07
CWE-311
siemens
www.cve.org
4
climatix pol909
web server
tls encryption
remote attacker
man-in-the-middle
sensitive data
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module) (All versions < V11.34). The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to read sensitive data, such as administrator credentials, or modify data in transit.
CNA Affected
[
{
"product": "Climatix POL909 (AWB module)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V11.42"
}
]
},
{
"product": "Climatix POL909 (AWM module)",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V11.34"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2021-11-09 12:15:00
nvd
nvd
CVE-2021-40366
2021-11-09 12:15:10
cnvd
cnvd
Siemens Climatix POL909 (AWM) Information Disclosure Vulnerability
2021-11-11 00:00:00
ics
ics
Siemens Climatix POL909 (Update A)
2022-03-10 12:00:00
cve
cve
CVE-2021-40366
2021-11-09 12:15:10