CVE-2025-67108 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	10 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
mitre	CNA	---				---
CISA-ADP	ADP	10 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Debian Releases

Debian Product

Codename

fastdds

bullseye (security)	undetermined
bullseye	undetermined
bookworm	undetermined
bookworm (security)	undetermined
trixie	undetermined
forky	undetermined
sid	undetermined

Common Weakness Enumeration

CWE-298 - Improper Validation of Certificate Expiration
A certificate expiration is not validated or is incorrectly validated, so trust may be assigned to certificates that have been abandoned due to age.

References

http://eprosima.com

http://fast-dds.com

https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913

https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263