CVE-2025-8762

MEDIUM

INSTAR 2K+ & 4K <3.11.1 Build 1124 - Physical Access Control

Title source: llm
STIX 2.1

Description

A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used.

References (3)

Core 3
Core References
Permissions Required, VDB Entry vdb-entry
https://vuldb.com/?id.319865
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.319865

Scores

CVSS v3 6.8
EPSS 0.0017
EPSS Percentile 6.3%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-1263 CWE-284
Status published
Products (2)
INSTAR/2K+ 3.11.1 Build 1124
INSTAR/4K 3.11.1 Build 1124
Published Aug 13, 2025
Tracked Since Feb 18, 2026