SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Nov 04

SEC Consult Vulnerability Lab Security Advisory < 20261104-0 >
=======================================================================
title: Improper device certificate validation enables AiTM attacks
product: Siemens SICAM Toolbox II device communication
vulnerable version: <V07.11
      fixed version: V07.11
         CVE number: CVE-2024-31853, CVE-2024-31854
           impact: High…

Source: Full Disclosure (seclists.org) · 2026-11-05