CVE Feed

    Dashboard / CVE / CVE-2025-61480

    CVE-2025-61480

    An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers.

    Published:Aug 26, 2026
    Last Modified:Aug 28, 2026
    EPS:Aug 26, 2026
    EPSS Score:0.00126
    CVSS Score:7.5

    Affected Products

    No affected product recorded yet

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-102 Session Sidejacking
    CAPEC-145 Checksum Spoofing
    CAPEC-147 XML Ping of the Death
    CAPEC-227 Sustained Client Engagement
    CAPEC-26 Leveraging Race Conditions
    CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-492 Regular Expression Exponential Blowup
    CAPEC-509 Kerberoasting
    CAPEC-555 Remote Services with Stolen Credentials
    CAPEC-561 Windows Admin Shares with Stolen Credentials
    CAPEC-60 Reusing Session IDs (aka Session Replay)
    CAPEC-644 Use of Captured Hashes (Pass The Hash)
    CAPEC-645 Use of Captured Tickets (Pass The Ticket)
    CAPEC-652 Use of Known Kerberos Credentials
    CAPEC-701 Browser in the Middle (BiTM)
    CAPEC-75 Manipulating Writeable Configuration Files
    CAPEC-94 Adversary in the Middle (AiTM)

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High