An improper validation of the server certificate by the Industrial Edge App Publisher allows attackers to intercept and modify traffic. This flaw, identified as CWE-295, permits a manual or automated man‑in‑the‑middle (MITM) attack, enabling the attacker to spoof a trusted server and access, alter, or block confidential data transmitted over TLS. The vulnerability compromises both the confidentiality and integrity of communications between the edge publisher and its intended server.

The affected vendor is Siemens, product Industrial Edge App Publisher. All versions prior to V1.27.9 are impacted. Users running any of those versions are susceptible to the MITM attack unless the software is upgraded beyond this threshold release.

The CVSS score of 7.6 reflects a high severity level, but no EPSS data is currently published, so the exact exploitation probability cannot be quantified. The vulnerability is not listed in CISA’s KEV catalog, indicating no known widespread exploitation to date. The attack vector is inferred to be network‑based; an adversary must be able to position themselves between the client and the legitimate server, or manipulate domain resolution or routing to redirect the client to a malicious server. Once positioned, the attacker can present a forged server certificate that the application will accept, allowing full interception and relay of the TLS session.