CVE-2025-14097 is a high-severity vulnerability in Radiometer product application software that allows remote code execution and unauthorized device management when specific internal conditions are met, including an enabled remote support feature. Exploitation requires a remote connection and additional information, indicating a complex attack vector. While a proof-of-concept exists, Radiometer is unaware of public exploits, and there is minimal community discussion or media coverage. The CVSS score is 7.2 (High), with a FAUCET Risk Score of 84/100, and it is not currently listed in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Radiometer Medical Aps | ABL800 BASIC And ABL800 FLEX Analyzers | Application software versions < 6.20MR2 with Windows 7, Windows XP operating systemsCNA affecteddefault unaffected | |
| Radiometer Medical Aps | ABL90 FLEX And ABL90 FLEX PLUS Analyzers | Application software versions < 3.5MR11 with Windows 7, Windows XP operating systemsCNA affecteddefault unaffected | |
| Radiometer Medical Aps | AQT90 FLEX Analyzers | Application software versions <= 8.13 MR2 with Windows 7, Windows XP operating systemsCNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.