CVE-2025-67108

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-67108
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.

10.0 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References
Link Resource
http://eprosima.com Product
http://fast-dds.com Broken Link Not Applicable
https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913 Third Party Advisory
https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263 Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:eprosima:fast_dds:3.3.0:*:*:*:*:*:*:*
History

02 Jan 2026, 17:49

Type Values Removed Values Added
First Time Eprosima
Eprosima fast Dds
CPE cpe:2.3:a:eprosima:fast_dds:3.3.0:*:*:*:*:*:*:*
References () http://eprosima.com - () http://eprosima.com - Product
References () http://fast-dds.com - () http://fast-dds.com - Broken Link, Not Applicable
References () https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913 - () https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913 - Third Party Advisory
References () https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263 - () https://github.com/eProsima/Fast-DDS/blob/master/src/cpp/security/accesscontrol/Permissions.cpp#L263 - Product

23 Dec 2025, 16:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-23 16:16

Updated : 2026-01-02 17:49

NVD link : CVE-2025-67108

Mitre link : CVE-2025-67108

CVE.ORG link : CVE-2025-67108

JSON object : View

Products Affected

eprosima

  • fast_dds
CWE
CWE-298

Improper Validation of Certificate Expiration

CWE-370

Missing Check for Certificate Revocation after Initial Check