Skip to main content

Improper Validation of Certificate Expiration

CVE-2025-67109

High
10/10

Summary

Improper verification of the time certificate in Eclipse Cyclone DDS allows attackers to bypass certificate checks and execute commands with System privileges.

  • LOW
  • NETWORK
  • HIGH
  • CHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-298 - Improper Validation of Certificate Expiration

A certificate expiration is not validated or is incorrectly validated, so trust may be assigned to certificates that have been abandoned due to age.

References

Advisory Timeline

  • Published