Vulnerabilities

TI-2025-38298 CVE-2025-61956 · GHSA-4p8r-c649-4cgv

Missing Authentication for Critical Function in Radiometrics VizAir

MEDIUM 50

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00745 Published 2025-11-04 Fixed in 08/2025 CWE-306

TI-2025-34597 CVE-2025-54863 · GHSA-p4q9-wr86-5gjc

MEDIUM 50

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00664 Published 2025-11-04 Fixed in 08/2025 CWE-522

TI-2025-38292 CVE-2025-61945 · GHSA-q4wg-4r43-jqjx

MEDIUM 50

Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00769 Published 2025-11-04 Fixed in 08/2025 CWE-306