PT-2025-45017 · Radiometrics · Radiometrics Vizair

·

CVE-2025-61945

·

Publicado

2025-11-04

·

Atualizado

2025-11-12

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Radiometrics VizAir (affected versions not specified)
Description Radiometrics VizAir is susceptible to unauthorized access to the admin panel, allowing remote attackers to modify critical weather parameters. These parameters include wind shear alerts, inversion depth, and CAPE values, which are crucial for accurate weather forecasting and flight safety. An attacker could disable vital alerts, creating hazardous conditions for aircraft, and manipulate runway assignments, potentially leading to mid-air conflicts or runway incursions. The admin panel is accessible without authentication.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-61945

Produtos afetados

Radiometrics Vizair