CVE-2024-31853CWE-295

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11)

High · published July 8, 2025

CVSS v4.0
7.7
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate.

This could allow an attacker to execute an on-path network (MitM) attack.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00203 · 9.7th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-07-08T10:34Z
EPSS history
Timeline
  • 08 JUL 10:34Z
    A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11)
    cvelistv5