PT-2025-37292 · Unknown · Wtw-Eagle App

Shogo Iyota · Published 2025-09-12 · Updated 2025-09-12 · CVE-2025-58781

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: WTW-EAGLE App (affected versions not specified)

Description: The WTW-EAGLE App does not properly validate server certificates, potentially allowing a man-in-the-middle attacker to monitor encrypted traffic.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-58781

Affected Products

Wtw-Eagle App

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-58781 · Security Note
• https://jvn.jp/en/jp/JVN89109713 · Note
• https://play.google.com/store/apps/details?id=com.generalcomp.wtw · Note
• https://apps.apple.com/jp/app/wtw-eagle/id1365998037?uo=4 · Note
• https://twitter.com/CVEnew/status/1966393335313994032 · Twitter Post
• https://t.me/CVEtracker/32351 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1966436827423809907 · Twitter Post
• https://t.me/cveNotify/135203 · Telegram Post