CVE-2023-25392

MEDIUM

MEDIUM Priority: 0.03 BB Relevance: 62/100

Published: 2023-04-10 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Network No Auth No Interaction Conf. Impact

AV: Network

AC: High

PR: None

UI: None

S: Unchanged

C: High

I: None

A: None

Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.

CWE-295

Vendor	Product	Version
allegro	bigflow	< 1.6

https://github.com/allegro/bigflow/pull/357

Patch

Exploit Third Party Advisory

62 / 100

✓ Network accessible
✓ No authentication
✓ No user interaction

5.9 / 10.0 v3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

0.43%

Raw Score 0.004340

Percentile 37.6%

Date 2026-10-29

2026-10-29

0.00434

2026-10-28

0.00434

nvd ref →