CVE-2025-58781

CVE-2025-58781

CVSS 6.3 MEDIUMEPSS 0.1%CWE-295

WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Productos afectados

Wireless Tsukamoto Co., Ltd. · WTW-EAGLE App for Android Wireless Tsukamoto Co., Ltd. · WTW-EAGLE App for iOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://apps.apple.com/jp/app/wtw-eagle/id1365998037?uo=4 https://jvn.jp/en/jp/JVN89109713/https://play.google.com/store/apps/details?id=com.generalcomp.wtw