Filtered by vendor Avtech Subscriptions
Filtered by product Eagleeyes\(lite\) Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-46408 1 Avtech 1 Eagleeyes\(lite\) 2025-10-17 9.8 Critical
An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.
CVE-2025-50944 1 Avtech 1 Eagleeyes\(lite\) 2025-10-14 8.8 High
An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation.