Critical severity · published Jul 9, 2025
CVE-2025-3499
Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector
10.0
CVSS
1%
EPSS
No
On KEV
Description
The device has two web servers that expose unauthenticated REST APIs on the management network (TCP
ports 8084 and 8086). Exploiting OS command injection through these APIs, an attacker can send arbitrary
commands that are executed with administrative permissions by the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
iSAP Smart Collector · Radiflow
1.20 before 3.02-1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-3499
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-3499
www.cvcn.gov.it
https://www.cvcn.gov.it/cvcn/cve/CVE-2025-3499
More from iSAP Smart Collector
9.9
CVE-2025-3498
Unauthenticated modification of Radiflow iSAP Smart Collector configuration
9.1
CVE-2026-22313
OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart Collector
8.7
CVE-2025-3497
Radiflow iSAP Smart Collector Linux distribution unmaintained
8.6
CVE-2026-22312
Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart Collector
6.8
CVE-2025-27028
Read access of deprivileged Radiflow iSAP Smart Collector user