CVE-2021-42027
14.12.2021, 12:15
A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.Enginsight
Vendor | Product | Version |
---|---|---|
siemens | sinumerik_edge | 𝑥 < 3.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration