CVE-2025-67108 Details

A vulnerability exists in eProsima Fast DDS version 3.3 due to improper validation of ticket revocation, leading to insecure communications and connections. The issue arises because the software only checks certificate expiration during the initial handshake, using OpenSSL's certificate verification. After the connection is established, continuous validation of certificate expiration is neglected. This flaw allows attackers to exploit short-term valid certificates to maintain connections and communications even after the certificates have expired, bypassing security policies and access controls. Consequently, this vulnerability undermines the certificate authentication mechanism of DDS Security, potentially causing compliance issues.