CVE-2025-55067CWE-190

CVE-2025-55067

High · published October 24, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

⚡ The clock is ticking, and it's about to turn back time! The TLS4B ATG system has a sneaky vulnerability that mismanages Unix time values, throwing you back to 1901 after 2038! 🔥 Think of it like a digital time machine gone haywire! Just when you think you’re in the present, the system suddenly resets to a past era, disrupting everything like a restaurant suddenly reverting to its 1901 menu without warning. This could lead to a catastrophic denial of service (DoS) — imagine being locked out of your own system as the login fails, while operational timers go haywire! With corrupted log entries and disrupted functionalities, the fallout could be absolutely devastating for your operations.

Put simply

Think of it like a digital time machine gone haywire! Just when you think you’re in the present, the system suddenly resets to a past era, disrupting everything like a restaurant suddenly reverting to its 1901 menu without warning. This vulnerability arises from the improper handling of Unix time values exceeding the 2038 epoch limit, causing the system clock to reset incorrectly, which could trigger authentication failures and operational issues.

What to do

This could lead to a catastrophic denial of service (DoS) — imagine being locked out of your own system as the login fails, while operational timers go haywire! With corrupted log entries and disrupted functionalities, the fallout could be absolutely devastating for your operations. To mitigate this risk, implement software patches as soon as they become available and consider updating your system's time handling mechanisms. Also, audit your systems to ensure they can handle time rollovers appropriately, particularly as 2038 approaches. You've got this! Fixing this vulnerability will keep your system sailing smoothly into the future. 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-10-24T00:15Z
References (3)
EPSS history
Timeline
  • 23 OCT 19:39Z
    Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System
    cvelistv5