The Liman Render Engine by HAVELSAN Inc. suffers from a key exchange vulnerability where entity authentication is missing, enabling an adversary to intercept or manipulate communications via a man-in-the-middle attack. The affected versions range from 1.0 up to but excluding 1.2-75. The CVSS 3.1 base score is 5.9, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity or availability impact.

An attacker positioned between communicating parties can exploit the lack of entity authentication during key exchange to intercept sensitive information, leading to a confidentiality breach. There is no reported impact on integrity or availability. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided. Users should monitor HAVELSAN Inc. communications for updates and apply any forthcoming patches promptly.