VulnerabilityDeferred
CVE-2025-8762
A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124.
MEDIUM 5.2EPSS 0.18%
Does this matter?
Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 5.2 MEDIUMCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284, CWE-1263
- Source
- cna@vuldb.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.