by Kastro
Paper/Archive/CVE-2025-3499

CVE-2025-3499

Radiflow iSAP Smart Collector — Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector

EPSS 1.0%CVSS 10.0
critical.is priorityof 100
42
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 62.2.622 × 2012.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086). Exploiting OS command injection through these APIs, an attacker can send arbitrary commands that are executed with administrative permissions by the underlying operating system.

Affected

ProductAffectedFixed inSource
iSAP Smart Collector1.20 – < 3.02-13.02-1CNA

Scores by source

ENISA (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcvcn.gov.it/cvcn/cve/CVE-2025-3499