CVE-2025-49196CWE-327
Deprecated TLS version supported
Medium · published June 12, 2025
What it is
A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00258 · 16.5th percentile
- Weakness
- CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
- Published
- 2025-06-12T14:20Z
EPSS history
Timeline