Description
An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers.
Published: 2026-08-26
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 18:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Spoofed TCP FIN Packets on Acre Security SPC5300 Main Board

Fri, 28 Aug 2026 08:30:00 +0000

Type Values Removed Values Added
Title Denial of Service via Spoofed TCP FIN Packets on Acre Security SPC5300 Main Board
Weaknesses CWE-20

Thu, 27 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-294
CWE-354
CWE-362
CWE-400
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 26 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via Spoofed TCP FIN Packets on Acre Security SPC5300 Main Board
Weaknesses CWE-20

Wed, 26 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers.
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-27T17:51:59.573Z

Reserved: 2025-09-26T00:00:00.000Z

Link: CVE-2025-61480

cve-icon Vulnrichment

Updated: 2026-08-27T17:51:54.492Z

cve-icon NVD

Status : Received

Published: 2026-08-26T21:16:37.937

Modified: 2026-08-27T20:17:01.500

Link: CVE-2025-61480

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T18:00:15Z

Weaknesses
  • CWE-294

    Authentication Bypass by Capture-replay

  • CWE-354

    Improper Validation of Integrity Check Value

  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

  • CWE-400

    Uncontrolled Resource Consumption