Lucene search
+L

8 matches found

OSV
OSV
added 2026/01/22 1:15 a.m.8 views

CVE-2025-27377

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS5.8AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 1:15 a.m.12 views

CVE-2025-27377

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 12:16 a.m.34 views

CVE-2025-27377 Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 12:16 a.m.5 views

CVE-2025-27377

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS5.4AI score0.00174EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/01/22 12:16 a.m.27 views

CVE-2025-27377

CVE-2025-27377 concerns Altium Designer 24.9.0, where self-signed server certificates are not validated for cloud connections. The root cause is improper certificate validation, enabling a potential MITM attacker to intercept or manipulate network traffic and possibly expose authentication creden...

5.3CVSS5.5AI score0.00174EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/22 12:16 a.m.5 views

CVE-2025-27377 Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS5.5AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.31 views

PT-2026-3884

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS5.5AI score0.00174EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/11/05 3:39 p.m.28 views

CVE-2021-42701 AzeoTech DAQFactory

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle MiTM attack. This could allow an attacker to obtain credentials and take over the user’s cloud account...

5CVSS6.4AI score0.0057EPSS
SaveExploits0References1
Rows per page
Query Builder