Main Vulnerability Database Vulnerabilities #VU102579

Improper certificate validation in ThousandEyes Endpoint Agent for macOS and ThousandEyes Endpoint Agent for RoomOS - CVE-2025-20126

Published: January 14, 2025

Vulnerability identifier: #VU102579

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20126

CWE-ID: CWE-295

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to insufficient certificate validation for hosted metrics services. A remote attacker can perform MitM attack between the remote metrics service and the vulnerable client.

Affected software

ThousandEyes Endpoint Agent for macOS
ThousandEyes Endpoint Agent for RoomOS

How to mitigate CVE-2025-20126

Install updates from vendor's website.

ThousandEyes Endpoint Agent for macOS - update to 1.206.3
ThousandEyes Endpoint Agent for RoomOS - update to 1.207.2

External References

Related Security Bulletins