CVE-2025-14095
BaseFortify
Publication date: 2025-12-17
Last updated on: 2025-12-18
Assigner: Radiometer
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| radiometer | analyzer | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
| CWE-693 | The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a privilege boundary violation affecting multiple Radiometer products. It allows a user with physical access to the analyzer to gain unauthorized access to functionalities outside the restricted environment due to a weakness in the design of access control implementation in the application software.
How can this vulnerability impact me? :
If exploited, this vulnerability can lead to unauthorized access to sensitive functionalities of the analyzer, potentially compromising the confidentiality, integrity, and availability of the device and its data. This could affect the reliability of test results and overall device security. Physical access to the device is required for exploitation.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability immediately, ensure that only authorized personnel have physical access to the analyzer device. Restricting physical access is the recommended temporary workaround until a permanent solution is provided by Radiometer representatives. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability requires physical access to the Radiometer analyzer and involves a privilege boundary violation due to access control weaknesses in the application software. Detection is not possible via network commands or remote scanning because the exploit requires physical interaction with the device. The recommended mitigation is to restrict physical access to authorized personnel only. No specific detection commands or network-based detection methods are provided.