Skip to content
OpenAdvisories

Vendor

Radiflow

7 known vulnerabilities.

Products

iSAP Smart Collector 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-27028

    Read access of deprivileged Radiflow iSAP Smart Collector user

    The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file system content, including files belonging to other users and having restricted access (like, for example, the root password hash).

    Radiflow iSAP Smart Collector
  • Medium 4.1
    CVE-2025-27027

    Restricted shell evasion in Radiflow iSAP Smart Collector

    A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restriction…

    Radiflow iSAP Smart Collector