VULNERABILITY INTELLIGENCE
CVE-2024-31854
CVSS score8.1 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-07-08
Last modified2026-06-17
Description
A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.11). During establishment of a https connection to the TLS server of a managed device, the affected application doesn't check device's certificate common name against an expected value. This could allow an attacker to execute an on-path network (MitM) attack.