Man-in-the-Middle Vulnerability in Siemens Scalance W7xx Devices

CVE-2013-4651

Summary

Siemens Scalance W7xx devices running firmware prior to version 4.5.4 are affected by a man-in-the-middle vulnerability due to the use of a hardcoded X.509 certificate. This flaw compromises the integrity of SSL sessions, allowing potential attackers to exploit the trust relationship established by the certificate. As a result, unauthorized entities may gain the ability to intercept and manipulate encrypted communications across different customer installations.

References