Connext Professional CVE-2025-10450

While the CVSS 4.0 base score of 8.3 indicates high severity based on confidentiality impact (VC:H), real-world exploitation risk appears moderate based on multi-source signals. The EPSS score of 0.05% (15th percentile) suggests minimal observed exploitation activity in the wild, likely due to the specialized nature of DDS middleware deployments and the requirement for network proximity to targeted Connext communications. No CISA KEV listing exists, and no public exploit code has been identified. The AT:P (Attack Complexity: Present) indicator reveals environmental prerequisites that limit opportunistic exploitation. However, the authentication bypass tag and PR:N (no privileges required) mean any network-positioned adversary can potentially intercept traffic without credentials. The combination of high confidentiality impact with limited integrity/availability effects (VI:L, VA:L) suggests this is primarily an information disclosure risk rather than a system compromise vector. Organizations using Connext Professional in air-gapped or physically secured networks face lower risk than those with internet-exposed DDS infrastructure. The SSVC framework would likely classify this as 'scheduled' priority rather than immediate emergency patching for most deployments, though critical infrastructure operators should prioritize given the middleware's role in safety-critical systems.

An attacker positioned on the same network segment as RTI Connext Professional nodes (version 7.5.0, for example) uses readily available packet capture tools to passively monitor DDS multicast or unicast traffic. Without requiring authentication or specialized exploit code, the attacker intercepts communication streams containing patient health records in a connected medical device network or personal identifiable information in a smart city sensor deployment. The low attack complexity and network attack vector mean the attacker needs only network access and basic traffic analysis capabilities to extract confidential data from unencrypted or inadequately protected DDS messages, potentially violating HIPAA, GDPR, or other privacy regulations.