CVE-2025-3499

🗓️ 09 Jul 2025 08:57:26Reported by ENISAType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 21 Views

Device has unauthenticated REST APIs allowing OS command injection with admin permissions.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-3499	9 Jul 202512:10	–	circl
CNNVD	Radiflow iSAP Smart Collector 安全漏洞	9 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-3499 Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector	9 Jul 202508:57	–	cvelist
EUVD	EUVD-2025-20794	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3499	9 Jul 202509:15	–	nvd
Positive Technologies	PT-2025-28865 · Radiflow · Isap Smart Collector	9 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-3499	11 Jul 202509:16	–	redhatcve
Vulnrichment	CVE-2025-3499 Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector	9 Jul 202508:57	–	vulnrichment

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "iSAP Smart Collector",
    "vendor": "Radiflow",
    "versions": [
      {
        "lessThan": "3.02-1",
        "status": "affected",
        "version": "1.20",
        "versionType": "semver"
      }
    ]
  }
]