CVE-2025-3497 HIGH

CVE-2025-3497: Radiflow iSAP Smart Collector Linux distribution unmaintained

Vendor Radiflow
Product iSAP Smart Collector
Weakness CWE-1104
Published July 9, 2025
Last update July 9, 2025

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

What the vulnerability does

01Description

The Linux distribution underlying the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) is obsolete and reached end of life (EOL) on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product.

Key dates

02Disclosure timeline

July 9, 2025 CVE published
July 9, 2025 Record updated