PT-2025-43550 · Unknown · Tls4B Atg System

Pedro Umbelino · Published 2025-10-23 · Updated 2025-10-24 · CVE-2025-55067

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions TLS4B ATG system (affected versions not specified)

Description The TLS4B ATG system is susceptible to issues stemming from improper handling of Unix time values exceeding the 2038 epoch rollover. Upon reaching January 19, 2038, the system clock resets to December 13, 1901, resulting in authentication failures and disruption of core functionalities including login access, history visibility, and leak detection termination. This could enable an attacker to manipulate the system time, potentially triggering a denial of service (DoS) condition. This could lead to administrative lockout, operational timer failures, and corrupted log entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-55067

Affected Products

Tls4B Atg System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-55067 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-03.json · Note
• https://twitter.com/CVEnew/status/1981448195650498913 · Twitter Post
• https://t.me/CVEtracker/35608 · Telegram Post
• https://veeder.com/us/network-security-reminder · Note
• https://twitter.com/VulmonFeeds/status/1981548396520337694 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-296-03 · Note