CVE-2026-18717
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
ASE2000 versions 2.35 through 2.37 are vulnerable to improper certificate validation, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.
Risk Assessment
An attacker could intercept and modify communications between devices, potentially leading to confidentiality and integrity breaches. This may also enable injection of malicious commands.
Recommendation
Upgrade ASE2000 to the latest version with certificate validation fixes. Monitor TLS connections for anomalous certificates.
Original NVD description (English source)
ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.