Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Additionally, manipulated meteorological data could mislead forecasters and ATC, causing inaccurate flight planning.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04 Mitigation, Third Party Advisory, US Government Resource
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 10.0 · radiometricsNVD modified 2026-10-18 21:10
Affected (CPE criteria) 1
cpe:2.3:a:radiometrics:vizair:*:*:*:*:*:*:*:*
References 2
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.json Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04 Mitigation, Third Party Advisory, US Government Resource