Vulnerability Description
Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sinumerik Integrate Access Mymachine\/Ethernet | - |
| Siemens | Sinumerik Integrate Operate Client | 2.0.3.00.016 |
| Siemens | Sinumerik Operate | 4.5 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/96519Third Party AdvisoryVDB Entry
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-934525.pdfVendor Advisory
- http://www.securityfocus.com/bid/96519Third Party AdvisoryVDB Entry
- http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-934525.pdfVendor Advisory
FAQ
What is CVE-2017-2685?
CVE-2017-2685 is a vulnerability with a CVSS score of 7.4 (HIGH). Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow a...
How severe is CVE-2017-2685?
CVE-2017-2685 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2685?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens Sinumerik Integrate Access Mymachine\/Ethernet, Siemens Sinumerik Integrate Operate Client, Siemens Sinumerik Operate.