CVE-2025-61480: n/a

This vulnerability affects Vanderbilt Industries Acre Security SPC5300.000 Main Board v3.14.1. It allows an attacker with physical proximity to send spoofed TCP FIN packets to the device. Due to lack of validation of TCP sequence and acknowledgment numbers, these packets can trigger a denial of service condition. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). There is no indication of confidentiality or integrity impact. No patch or remediation information is provided in the source data.

An attacker physically near the device can disrupt its availability by sending spoofed TCP FIN packets that the device improperly processes. This results in a denial of service condition, potentially impacting the operation of the security system relying on the SPC5300.000 Main Board. There is no reported impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, physical security controls to prevent attacker proximity and network-level protections to detect or block spoofed TCP FIN packets may help reduce risk.