Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication

Due to insufficient validation of device certificates during connections used for device management, Siemens SICAM TOOLBOX II was vulnerable to Adversary-in-the-Middle (AiTM) attacks. The vendor provides a patched version V07.11 or higher since July 2025.

CVE-2024-31853, CVE-2024-31854

Read the full advisory here (s'ouvre dans un nouvel onglet)