CVE-2025-8476CWE-295

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability

High · published August 1, 2025

CVSS v3.0
7.1
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the TIDAL music streaming application. The issue results from improper certificate validation. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-26322.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-08-01T17:38Z
EPSS history
Timeline
  • 01 AUG 17:38Z
    Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability
    cvelistv5