TLS Chain Validation Flaw in AVTECH EagleEyes by AVTECH
CVE-2025-50944
8.8HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-50944?
A security issue has been identified in AVTECH EagleEyes version 2.0.0, where the method MySSLSocketFactoryNew.checkServerTrusted contains a vulnerability. The X509TrustManager employed in this method performs an inadequate validation process, as it only checks for the certificate's expiration date. This oversight leads to the potential bypass of proper TLS chain validation, posing significant security risks in establishing trusted server connections.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.