← Database

CVE-2025-46408

CRITICAL CVSS: 9.8 Published: 2025-09-15 Modified: 2026-06-17

Description

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.

Affected Platforms

Avtech Eagleeyes\(Lite\)

Weakness Type

CWE-297

References