CVEvulnerability

CVE-2015-3610

5.4 MEDIUM Published 2015-05-07 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-05-07
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.4 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:P
Weaknesses: CWE-310

Description

The Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information or modify data via a crafted certificate.

Affected configurations

• siemens homecontrol for room automation (<= 2.0.0)

Weakness · not in database (1)

CWE-310

References

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-311412.pdf Vendor Advisory
http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-311412.pdf Vendor Advisory

CVE-2015-3610

Description

Affected configurations

Related

Weakness · not in database (1)

References