VYPR
← All advisories
High severity7.4NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-42027

CVE-2021-42027

Description

A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.

Affected products

3
  • Siemens Foundation/Sinumerik Edge3 versions
    cpe:2.3:a:siemens:sinumerik_edge:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:sinumerik_edge:*:*:*:*:*:*:*:*range: <3.2
    • (no CPE)range: <V3.2
    • (no CPE)range: All versions < V3.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.