CVE-2025-27377 | BDVDB-2026-311601 Detail
AltiumAltium Designer
Description#
Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle (MITM) attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensitive design data.
Impact#
CAPEC-94 Man-in-the-Middle Attack
Weaknesses#
- CWE-295 – Improper Certificate Validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.