Eagleeyes(lite) vulnerabilities

2 known vulnerabilities in Eagleeyes(lite) from Avtech. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Eagleeyes(lite): Improper Certificate Validation

  CVE-2025-50944Sep 15, 2025Avtech

  An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain valid

• 9.8 Critical severity

  Eagleeyes(lite): Improper Validation of Certificate with Host Mismatch

  CVE-2025-46408Sep 15, 2025Avtech

  An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOW_ALL_HOSTNAME_VERIFIER, bypassing domain validation.