VULNERABILITY INTELLIGENCE

CVE-2025-61956

CVSS score10 CRITICAL
EPSS probability0.74%
CISA KEVNot currently listed
Published2025-11-04
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Description

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Additionally, manipulated meteorological data could mislead forecasters and ATC, causing inaccurate flight planning.

Weakness classification

  • CWE-306: Missing Authentication for Critical Function

Primary references