PT-2025-45017 · Radiometrics · Radiometrics Vizair

Souvik Kandar · Published 2025-11-04 · Updated 2025-11-12 · CVE-2025-61945

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Radiometrics VizAir (affected versions not specified)

Description Radiometrics VizAir is susceptible to unauthorized access to the admin panel, allowing remote attackers to modify critical weather parameters. These parameters include wind shear alerts, inversion depth, and CAPE values, which are crucial for accurate weather forecasting and flight safety. An attacker could disable vital alerts, creating hazardous conditions for aircraft, and manipulate runway assignments, potentially leading to mid-air conflicts or runway incursions. The admin panel is accessible without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-61945

Affected Products

Radiometrics Vizair

References · 9

• https://osv.dev/vulnerability/CVE-2025-61945 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61945 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.json · Note
• https://twitter.com/gothburz/status/1988706021678670308 · Twitter Post
• https://t.me/cveNotify/142525 · Telegram Post
• https://twitter.com/SecAideInfo/status/1986739501679395321 · Twitter Post
• https://t.me/CVEtracker/36534 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-308-04 · Note
• https://t.me/cveNotify/141986 · Telegram Post