CVE-2025-3497

Published: Jul 9, 2025Modified: Jun 17, 2026Deferred

8.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Exploitability: 2.3 / Impact: 5.8

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (Secondary)

Description

The Linux distribution underlying the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) is obsolete and reached end of life (EOL) on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product.

Related CWEs

CWE-1104

Use of Unmaintained Third Party Components

The product relies on third-party components that are not actively supported or maintained by the original developer or a trusted proxy for the original developer.

References (1)

https://www.cvcn.gov.it/cvcn/cve/CVE-2025-3497

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Timeline

No history available yet.