Access Control Flaw in eprosima Fast DDS Affects Security and Stability
CVE-2025-24807
4.5MEDIUM
What is CVE-2025-24807?
An access control vulnerability exists within eprosima Fast DDS that affects the validation of the PermissionsCA, allowing unauthorized access through expired Certificates Authority. Specifically, the system fails to validate both the full chain of the PermissionsCA and its expiration date. This flaw can lead to system crashes if the PermissionsCA is not self-signed and lacks a complete certification path. It is recommended that users upgrade to the fixed versions (2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0) to mitigate this issue.
Affected Version(s)
Fast-DDS < 2.6.10 < 2.6.10
Fast-DDS >= 2.7.0, < 2.10.7 < 2.7.0, 2.10.7
Fast-DDS >= 2.11.0, < 2.14.5 < 2.11.0, 2.14.5