CVE-2025-14543: connext professional from 4.3.0 (inclusive), through 5.2.3 (inclusive), from 5.3.0 (inclusive), through 5.3.1.45…

Affected technology

connext professional · from 4.3.0 (inclusive), through 5.2.3 (inclusive)
rti

connext professional · from 5.3.0 (inclusive), through 5.3.1.45 (inclusive)
rti

connext professional · from 6.0.0 (inclusive), through 6.0.1.40 (inclusive)
rti

connext professional · from 6.1.0 (inclusive), through 6.1.2.27 (inclusive)
rti

connext professional · from 7.0.0 (inclusive), before 7.3.1.1 (exclusive)
rti

connext professional · from 7.4.0 (inclusive), before 7.7.0 (exclusive)
rti

Connext Professional · 7.4.0 to before 7.7.0, 7.0.0 to before 7.3.1.1, 6.1.0 to before 6.1.*, 6.0.0 to before 6.0.*, 5.3.0 to before 5.3.*, 5.2.0 to before 5.2.*, 4.3x to before 5.1.*
RTI

Component: Core Libraries

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 8.8/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.