Beveiligingsadvies

CVE-2025-4384

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-06 15:59:27
Laatst bijgewerkt 2025-09-05 16:38:07
Toegewezen door arcinfo
CVSS-score 6.0
Status PUBLISHED

Beschrijving

The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client certificate reduces the risk for random devices to take advantage of this flaw.