Skip to content
OpenAdvisories

Vendor

Radiflow

7 known vulnerabilities.

Products

iSAP Smart Collector 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-22312

    Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart Collector

    The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker to get access to system settings, modify the configuration and execute some commands (e.g. system reboot).

    Radiflow iSAP Smart Collector
  • High 8.7
    CVE-2025-3497

    Radiflow iSAP Smart Collector Linux distribution unmaintained

    The Linux distribution underlying the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) is obsolete and reached end of life (EOL) on June 30, 2024. Thus, any unmitigated vulnerability could be exploited to affect this product.

    Radiflow iSAP Smart Collector