A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack.
References
Link | Resource |
---|---|
https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-589378.pdf | Vendor Advisory |
http://www.securityfocus.com/bid/99582 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-08-07 17:29
Updated : 2019-10-09 16:29
NVD link : CVE-2017-6870
Mitre link : CVE-2017-6870
JSON object : View
CWE
Products Affected
siemens
- simatic_wincc_sm\@rtclient