CVE-2026-18717

HIGH 7.4

Improper Certificate Validation in ASE 2000

CVSS Score

7.4

EPSS Score

0.0%

EPSS Percentile

0th

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

CWE	CWE-295
Vendor	applied systems engineering
Product	ase2000 v2
Published	Aug 27, 2026

Stay Ahead of the Next One

Get instant alerts for applied systems engineering ase2000 v2

Be the first to know when new high vulnerabilities affecting applied systems engineering ase2000 v2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

Applied Systems Engineering / ASE2000 V2

2.25 ≤ 2.37

References

NVD ↗ CVE.org ↗ EPSS Data ↗

ase-systems.com: http://www.ase-systems.com cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04 github.com: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-239-04.json

Credits

Enoch Wang reported this vulnerability to CISA.