QwikSec

Security Database

CVE

CWE

Training

CVE-2025-4384

Published: May 6, 2025

Modified: Sep 5, 2025

PUBLISHED

Description

The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client certificate reduces the risk for random devices to take advantage of this flaw.

Vendor	Product	Versions
arcinfo	PcVue	unaffected `16.3.0` affected `16.0 - < 16.2.5` affected `15.0 - < 15.2.12`

Weaknesses (CWE)

References

https://www.pcvue.com/security/#SB2025-3

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.