Executive brief
eProsima Fast-DDS is a software library used for real-time data communication in robotics, automotive, and industrial systems. A security flaw was found where the system fails to re-verify security certificates after an initial connection is made. This allows an attacker to use a temporary or expired certificate to maintain a permanent, unauthorized connection, potentially leading to the theft of sensitive data or unauthorized control of connected devices.
Technical details
A vulnerability exists in eProsima Fast-DDS v3.3 due to improper validation of certificate expiration and revocation (CWE-298, CWE-370). The software utilizes OpenSSL's X509_verify_cert in PKIDH.cpp and is_validation_in_time in Permissions.cpp only during the initial handshake phase. Once a connection is established and permissions are granted, the system fails to perform continuous or periodic validation. A remote, unauthenticated attacker can exploit this by using a certificate with a short validity period to establish a session and continue communicating indefinitely after the certificate has expired or been revoked. This bypasses the DDS Security authentication mechanism and access controls.
Affected products
- eProsima Fast-DDS 3.3.0
Timeline
- 2025-12-23: disclosed: Vulnerability details and CVE assigned.
- 2025-12-23: advisory: NVD publication date.