CVE-2025-14097CWE-287

Remote Code Execution Vulnerability in Radiometer Products

High · published December 17, 2025

CVSS v3.1
7.2
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

⚡ A remote connection is all it takes for attackers to gain control of multiple Radiometer products! 🦸‍♂️ Think of it like a repair technician who can access your security system from afar — if they have the right information, they can unlock the door and walk right in without you knowing! This vulnerability could allow an attacker to execute arbitrary code, potentially putting your entire device management at risk. Imagine unauthorized access to sensitive medical data or critical devices, which could lead to devastating consequences! 🔥

Put simply

Think of it like a repair technician who can access your security system from afar — if they have the right information, they can unlock the door and walk right in without you knowing! The flaw resides in the application software of Radiometer analyzers, where a weakness allows remote code execution if a proper connection is established. This means that attackers could manipulate devices without authorization, given certain internal conditions are met.

What to do

This vulnerability could allow an attacker to execute arbitrary code, potentially putting your entire device management at risk. Imagine unauthorized access to sensitive medical data or critical devices, which could lead to devastating consequences! 🔥 To protect against this vulnerability, ensure that the affected application software version is not in use and that the remote support feature is disabled. If the network's security is questionable, remove the analyzer from the network immediately. Work with local Radiometer representatives to discuss permanent solutions. You've got this! Follow these steps, and you’ll have your devices secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00465 · 39.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-12-17T12:36Z
EPSS history
Timeline
  • 17 DEC 12:36Z
    Remote Code Execution Vulnerability in Radiometer Products
    cvelistv5