PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-61480 Vanderbilt Industries CVE debrief

A denial of service vulnerability exists in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1. A physically proximate attacker can cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers. This issue allows an attacker to disrupt service, potentially impacting operational availability. Defenders should prioritize verifying affected versions and assessing exposure to ensure system integrity and availability. The vulnerability highlights the need for physical security measures and network protections to prevent and mitigate such attacks.

Vendor
Vanderbilt Industries
Product
Acre Security SPC5300.000 Main Board
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-26
Original CVE updated
2026-09-09
Advisory published
2026-08-26
Advisory updated
2026-09-09

Who should care

Defenders responsible for Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 systems should assess exposure and prioritize verification and remediation.

Why it matters

The vulnerability allows a physically proximate attacker to cause a denial of service, and defenders should prioritize verifying affected versions and assessing exposure.

  • Denial of service attacks are possible via spoofed TCP FIN packets
  • Verification of affected versions is required
  • Implementation of compensating controls is necessary to prevent attacks

Technical summary

The vulnerability exists in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 and allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers.

Defensive priority

Defenders should prioritize verifying the affected versions and assessing exposure, as the vulnerability allows a physically proximate attacker to cause a denial of service.

Recommended defensive actions

  • Verify the affected versions of Vanderbilt Industries, Acre Security SPC5300.000 Main Board
  • Assess exposure to the vulnerability
  • Implement compensating controls to prevent denial of service attacks

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its description and CVSS score. The vulnerability is confirmed in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1. Defenders should verify affected versions and assess exposure. The information provided by CVE and NVD offers a foundation for understanding the vulnerability's impact and required mitigations. Additional verification and review of system configurations

Sources and references

Verified primary and authoritative sources

  • CVE-2025-61480 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-61480

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-61480 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-61480

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.