CVE-2025-61479CWE-294

CVE-2025-61479

High · published August 27, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2026-08-27T01:16Z
References (1)
https://nva.sikt.no/registration/019c9145712a-8c458dda-4473-488c-9a20-b9e8938f24d5 · [email protected]
EPSS history
Timeline
  • 28 AUG 06:23Z
    EPSS moved — → 0%
    epss
  • 26 AUG 00:00Z
    An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the…
    cvelistv5