CVE-2025-3498 CRITICAL

CVE-2025-3498: Unauthenticated modification of Radiflow iSAP Smart Collector configuration

Vendor Radiflow
Product iSAP Smart Collector
Weakness CWE-306 · Missing auth
Published July 9, 2025
Last update July 9, 2025
View on NVD All CVEs

CVSS base score

9.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

What the vulnerability does

01Description

An unauthenticated user with management network access can get and modify the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) configuration. The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086). An attacker can use these APIs to get access to all system settings, modify the configuration and execute some commands (e.g., system reboot).

Key dates

02Disclosure timeline

July 9, 2025 CVE published
July 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-0878 Novel attack against the Combined Charging System (CCS) in electric vehicles to remotely cause a denial of service CVE-2024-5951 Deep Sea Electronics DSE855 Factory Reset Missing Authentication Denial-of-Service Vulnerability CVE-2025-8610 AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability CVE-2020-12500 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2026-39393 Post-Installation Re-entry via Cache-Dependent Install Guard Bypass in ci4ms