CVE-2025-8762CWE-1263CWE-284

INSTAR 2K+/4K UART improper physical access control

High · published August 13, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00191 · 8.3th percentile
Weaknesses
CWE-1263 · Improper Physical Access Control; CWE-284 · Improper Access Control
Published
2025-08-13T06:14Z
EPSS history
Timeline
  • 13 AUG 06:14Z
    INSTAR 2K+/4K UART improper physical access control
    cvelistv5