CVE-2025-61478: n/a

This vulnerability affects Vanderbilt Industries Acre Security SPC5300.000 Main Board version 3.14.1. It allows an attacker with physical proximity to the device to send spoofed SYN packets, leading to a denial of service (DoS). The issue is categorized under CWE-400 (Uncontrolled Resource Consumption) and CWE-830 (Reachable Assertion). The CVSS v3.1 base score is 7.5, indicating high severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). No known exploits in the wild have been reported, and no patch or remediation information is currently available.

The vulnerability causes denial of service by exhausting resources or triggering assertion failures via spoofed SYN packets. It does not affect confidentiality or integrity but can disrupt availability of the affected device, potentially impacting security monitoring or control functions relying on the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit physical access to the device to trusted personnel only to prevent exploitation by physically proximate attackers.