Security Advisory

CVE-2025-8393

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-08 16:23:19
Last updated 2025-08-08 19:14:14
Assigner icscert
State PUBLISHED

Description

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentials and sensitive session tokens.