CVE-2022-25640

CVE-2022-25640 is a high-severity vulnerability affecting wolfSSL versions prior to 5.2.0, where a TLS 1.3 server fails to enforce mutual authentication. An unauthenticated attacker can bypass certificate presentation by omitting the certificate_verify message during the handshake, leading to a compromise of integrity. While the CVSS score is 7.5 (HIGH), indicating a network-exploitable vulnerability with low attack complexity, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion.