VulnerabilityDeferred

CVE-2025-3498

The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086).

CRITICAL 9.9EPSS 0.29%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An unauthenticated user with management network access can get and modify the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) configuration. The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086). An attacker can use these APIs to get access to all system settings, modify the configuration and execute some commands (e.g., system reboot).

CVSS 3.1: 9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L
EPSS: 0.29% probability · 22th percentile
CISA KEV: Not listed
Weakness: CWE-306
Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2025-3498

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.