description: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to the transmitted data.
problem types: CWE-311: Missing Encryption of Sensitive Data
affected:
{
product: SICAM MMU
vendor: Siemens AG
versions:
status: affected, version: All versions < V2.05
}
{
product: SICAM SGU
vendor: Siemens AG
versions:
status: affected, version: All versions
}
{
product: SICAM T
vendor: Siemens AG
versions:
status: affected, version: All versions < V2.18
}
