Critical severity · published Jul 9, 2025
CVE-2025-3498
Unauthenticated modification of Radiflow iSAP Smart Collector configuration
9.9
CVSS
0.3%
EPSS
No
On KEV
Description
An unauthenticated user with management network access can get and
modify the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20)
configuration. The device has two web servers that expose unauthenticated REST APIs on the management network (TCP
ports 8084 and 8086). An attacker can use these APIs to get access to all system settings, modify the configuration
and execute some commands (e.g., system reboot).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
High
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
iSAP Smart Collector · Radiflow
1.20 before 3.02-1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3498
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3498
www.cvcn.gov.it
https://www.cvcn.gov.it/cvcn/cve/CVE-2025-3498
More from iSAP Smart Collector
10.0
CVE-2025-3499
Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector
9.1
CVE-2026-22313
OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart Collector
8.7
CVE-2025-3497
Radiflow iSAP Smart Collector Linux distribution unmaintained
8.6
CVE-2026-22312
Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart Collector
6.8
CVE-2025-27028
Read access of deprivileged Radiflow iSAP Smart Collector user