Approved changes feed: RSS · Atom

cpe:2.3:a:kalkitech:ase2000_v2_communication_test_set:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKalkitech (3d48852a-df15-5a6a-ad06-32f92cdac3e1)
ProductAse2000 V2 Communication Test Set (7f8442dd-1626-5dbe-8584-6ed0d4b1f723)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-90647 vulnerable 2026-09-16 04:33:05.445455 Details available
HIGH (7.4)
ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client (Task Mode). This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneous faults, enabling a Man-in-the-Middle attack on protected communications.
Published: 2026-09-12T22:38:16.637Z
Updated: 2026-09-15T17:10:28.897Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.