A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check the extended key usage attribute of that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack.
2025-07-08T11:15:23.997
2025-07-08T16:18:14.207
Awaiting Analysis
CVSSv3.1: 8.1 (HIGH)
-