CVE-2017-6870

CVE-2017-6870 affects Siemens SIMATIC WinCC Sm@rtClient for Android (all versions prior to 1.0.2.2). The TLS implementation could allow an attacker in a network-position to read and modify data within a TLS session via a Man-in-the-Middle attack. Exploitation details are not provided in the docum...

CVE-2017-6871

CVE-2017-6871 affects Siemens SIMATIC WinCC Sm@rtClient for Android and Sm@rtClient Lite for Android (all versions before 1.0.2.2). The vulnerability is an authentication bypass: when a device is unlocked and the affected app runs, an attacker with physical access could bypass the app’s authentic...