1. Home
  2. CVE Database
  3. CVE-2017-6873
HIGH · 7.4

CVE-2017-6873

A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle ...

Vulnerability Description

A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack on the integrated web server on port 443/tcp.

CVSS Score

7.4

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
SiemensOzw772 Firmware-
SiemensOzw772-
SiemensOzw672 Firmware-
SiemensOzw672-

Related Weaknesses (CWE)

CWE-306

References

FAQ

What is CVE-2017-6873?

CVE-2017-6873 is a vulnerability with a CVSS score of 7.4 (HIGH). A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle ...

How severe is CVE-2017-6873?

CVE-2017-6873 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-6873?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Ozw772 Firmware, Siemens Ozw772, Siemens Ozw672 Firmware, Siemens Ozw672.