TROYANOSYVIRUS
← Voltar para CVEs

CVE-2025-67108

CRITICAL
10.0

Descricao

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.

Detalhes CVE

Pontuacao CVSS v3.110.0
SeveridadeCRITICAL
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado12/23/2025
Ultima modificacao1/2/2026
Fontenvd
Avistamentos honeypot0

Produtos afetados

eprosima:fast_dds

Fraquezas (CWE)

CWE-298CWE-370

Referencias

http://eprosima.com(cve@mitre.org)
http://fast-dds.com(cve@mitre.org)
https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913(cve@mitre.org)
https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263(cve@mitre.org)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.