Lucene search
SiemensCVELIST:CVE-2022-40147HistoryOct 11, 2022 - 12:00 a.m.
CVE-2022-40147
2022-10-1100:00:00
CWE-295
siemens
www.cve.org
1
vulnerability
industrial edge management
tls connection
spoofing
trusted entity
A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.
CNA Affected
[
{
"vendor": "Siemens",
"product": "Industrial Edge Management",
"versions": [
{
"version": "All versions < V1.5.1",
"status": "affected"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2022-10-11 11:15:00
ics
ics
Siemens Industrial Edge Management
2022-10-13 12:00:00
cve
cve
CVE-2022-40147
2022-10-11 11:15:10
nvd
nvd
CVE-2022-40147
2022-10-11 11:15:10
cnvd
cnvd
Siemens Industrial Edge Management Trust Management Issue Vulnerability
2022-10-13 00:00:00