CVE-2025-3497: high-severity vulnerability in Radiflow iSAP Smart Collector
Radiflow iSAP Smart Collector Linux distribution unmaintained
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The Radiflow iSAP Smart Collector runs on CentOS 7, an obsolete Linux version that stopped receiving security updates in June 2024. This means new security vulnerabilities in the operating system won't be patched, leaving the device exposed to attacks.
The underlying CentOS 7 distribution reached end-of-life on June 30, 2024, eliminating vendor security patches. Attackers can exploit unmitigated OS-level vulnerabilities through network or local access vectors to compromise the Smart Collector, potentially affecting industrial control operations depending on its deployment context.
In the same product, most dangerous first.