Insecure Communication Vulnerability in Kaleris NAVIS N4 Ultra Light Client

CVE-2025-5087

What is CVE-2025-5087?

Kaleris NAVIS N4 Ultra Light Client exhibits a serious security weakness due to its use of zlib-compressed data transmitted over HTTP. This insecure communication channel allows attackers to intercept network traffic between the Ultra Light Clients and N4 servers, potentially leading to the exposure of sensitive information such as plaintext user credentials. By exploiting this vulnerability, unauthorized individuals can gain access to critical data, posing significant risks to the integrity and confidentiality of user accounts.

References