CVE-2017-6870

2017-08-0800:00:00

CWE-300

siemens

www.cve.org

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

44.0%

JSON

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle (MitM) attack.

CNA Affected

[
  {
    "product": "SIMATIC WinCC Sm@rtClient for Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "SIMATIC WinCC Sm@rtClient for Android"
      }
    ]
  }
]