What is the CVSS score of CVE-2025-3497?

CVE-2025-3497 has a CVSS 3.1 base score of 8.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2025-3497?

Within 24 hours: Identify all systems running Radiflow and their underlying Linux distribution versions; consult Radiflow security advisories for affected versions and corresponding patched Linux distributions. Within 7 days: Test the vendor-released patch in a staging environment matching your production Radiflow deployment configuration. Within 30 days: Deploy patched Linux distributions to all production Radiflow systems, prioritizing those in critical operational networks, and verify patch application across the infrastructure.

CVE-2025-3497

EUVD-2025-20793 HIGH

Use of Unmaintained Third Party Components (CWE-1104)

2025-07-09 a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Information Disclosure

8.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:28 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

3.02-1

EUVD ID Assigned

Mar 16, 2026 - 06:20 euvd

EUVD-2025-20793

Analysis Generated

Mar 16, 2026 - 06:20 vuln.today

CVE Published

Jul 09, 2025 - 09:15 nvd

HIGH 8.7

DescriptionCVE.org

The Linux distribution underlying the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) is obsolete and reached end of life (EOL) on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product.