VULNERABILITY INTELLIGENCE
CVE-2025-7390
CVSS score9.1 CRITICAL
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-08-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.
Weakness classification
- 10de8ef9-5c89-4b17-8228-e97b74acf4bd: CWE-295