Home

Description

The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive information (such as assets and alerts), impersonation of the server, or injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC.

PUBLISHED Reserved 2025-04-16 | Published 2026-03-04 | Updated 2026-03-04 | Assigner Nozomi




MEDIUM: 6.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Problem types

CWE-295 Improper Certificate Validation

Product status

Default status
unaffected

Any version before 2.2.0
affected

Credits

This issue was found by Felix Eberstaller of Limes Security during a VAPT testing session commissioned by one of our customers. finder

References

security.nozominetworks.com/NN-2025:18-01

cve.org (CVE-2025-40896)

nvd.nist.gov (CVE-2025-40896)

Download JSON