← Back

CVE-2025-7390

nvd nist
Published: Aug 21, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: 10de8ef9-5c89-4b17-8228-e97b74acf4bd (Secondary)

Description

A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (2)

Source: 10de8ef9-5c89-4b17-8228-e97b74acf4bd
Source: 10de8ef9-5c89-4b17-8228-e97b74acf4bd

Timeline

No history available yet.