CVE-2017-2685: Siemens Sinumerik Integrate Access Mymachine/ethernet

High severity, CVSS 7.4. EPSS: 1% chance of exploitation in the next 30 days.

Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.

Affected products

• Siemens Sinumerik Integrate Access Mymachine/ethernet: affected versions not specified
• Siemens Sinumerik Integrate Operate Client: version 2.0.3.00.016 only; version 3.0.4.00.032 only
• Siemens Sinumerik Operate: version 4.5 only; version 4.7 only

Published 2017-03-01. Last modified 2026-06-17.