CVE-2025-67109 | Improper verification of the time certificate in Eclipse Cyc… | CVSS 10.0 CRITICAL

Description

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.

Metadata

CVE ID: CVE-2025-67109
State: PUBLISHED
Assigner: mitre
Reserved: 2025-12-08 00:00 UTC
Published: 2025-12-23 00:00 UTC
Last updated: 2026-07-05 01:25 UTC
Primary CWE: CWE-298
CWE-298 Improper Validation of Certificate Expiration
Vendor / Product: n/a / n/a
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
n/a	n/a	—	n/a

Weakness (CWE)

CWE	Source	Description
—	cna	n/a
CWE-298	adp	CWE-298 Improper Validation of Certificate Expiration

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.1	adp	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References (3)