CVE-2025-4384 — Certificate validity not properly verified
The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certifi…
Published: 2025-05-06 · CVSS: 6.0 · CVSS 4.0
The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client certificate reduces the risk for random devices to take advantage of this flaw.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7