CVE-2025-67108

eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections

Critical · published December 23, 2025

CVSS v3.1
10.0
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

🚨 Improper ticket revocation in eProsima Fast-DDS v3.3 means connections could be compromised, leaving communications wide open for attackers! 🔥 Think of it like a party where the bouncer forgets to check invitations, letting in anyone who claims they belong. Without proper validation, malicious guests can join the conversation, and we all know party crashers can wreak havoc! An attacker could eavesdrop on sensitive communications or even take control of the connection, potentially leading to data breaches or unauthorized access — absolutely devastating! Imagine sensitive information being freely exchanged under the radar; the stakes are high!

Put simply

Think of it like a party where the bouncer forgets to check invitations, letting in anyone who claims they belong. Without proper validation, malicious guests can join the conversation, and we all know party crashers can wreak havoc! This vulnerability results from improper validation of ticket revocation, allowing unauthorized connections to continue, even when they should have been terminated. This flaw opens up pathways for malicious activities, compromising the integrity of the communications.

What to do

An attacker could eavesdrop on sensitive communications or even take control of the connection, potentially leading to data breaches or unauthorized access — absolutely devastating! Imagine sensitive information being freely exchanged under the radar; the stakes are high! Update eProsima Fast-DDS to version 3.4 or later immediately to close this security gap. Review your configurations to ensure proper validation checks are in place and conduct a thorough audit of your network communications. You've got this! Fixing this critical vulnerability will reinforce your security and keep your communications safe. 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Published
2025-12-23T00:00Z
EPSS history
Timeline
  • 23 DEC 00:00Z
    eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections
    cvelistv5