TLS Server Certificate Validation Flaw in SICAM TOOLBOX II by Siemens
CVE-2024-31854

7.7HIGH

Key Information:

Vendor

Siemens
Status
Sicam Toolbox Ii
Vendor
CVE Published:
8 July 2025

What is CVE-2024-31854?

A vulnerability has been discovered in SICAM TOOLBOX II that impacts all versions prior to V07.11. The application's failure to properly validate the TLS server certificate's common name against the expected value could enable an attacker to perform a Man-in-the-Middle (MitM) attack during the establishment of a secure HTTPS connection. This oversight poses a significant risk to the integrity and confidentiality of data transmitted between devices and the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SICAM TOOLBOX II 0

References

https://cert-portal.siemens.com/productcert/html/ssa-1839...

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.