External risk intelligence

Radiometrics VizAir Unauthenticated Admin Panel Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 10.0)

CVE-2025-61945

Radiometrics VizAir is an administrative system for weather monitoring and flight safety. Administrative panels are commonly deployed as web-based interfaces accessed over networks. While industrial controls are often segmented, such systems are frequently exposed or accessible via internal gateways and remote management services, making network-reachable deployment a common pattern for this product role.

Missing Authentication

Radiometrics Vizair

before 2025-08

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

Radiometrics VizAir, a system for weather monitoring, has a critical vulnerability allowing unauthenticated remote attackers to access the admin panel. This access could permit manipulation of weather parameters vital for flight safety and air traffic control, potentially leading to hazardous aviation conditions.

Unauthorized access to weather control systems.
Critical weather data manipulation impacts flight safety.
Verify system relevance and exposure.

Attack Path

How an attacker could exploit the issue

An attacker can reach the vulnerable VizAir system through the internet and gain access to its admin panel without needing any credentials. Once authenticated, the attacker can alter critical weather information, potentially leading to dangerous flight conditions or air traffic incidents.

No authentication required to access admin panel.
Modifies critical weather and flight parameters.
Leads to hazardous flight conditions.

Live Threat

Current exploitation, exposure, and threat context

An attacker could remotely access the VizAir admin panel without authentication to alter critical weather data. This manipulation could disable crucial alerts, potentially leading to hazardous conditions for aircraft and unsafe runway assignments.

Critical weather forecasting data could be altered.
Remote attackers can access the admin panel without authentication.
Hazardous flight conditions and runway incidents may occur.

Operational Fix

Recommended remediation, mitigation, and detection steps

The administrative panel of Radiometrics VizAir systems requires immediate attention from teams responsible for critical infrastructure and operational technology. Given the system's role in weather forecasting and flight safety, application owners, infrastructure teams, and security operations must collaborate to identify all deployments. The first practical step involves locating these systems, assessing their network exposure, confirming business criticality, and identifying the accountable owner before planning remediation activities.

Identify affected system owners.
Verify system reachability and criticality.
Plan risk-based remediation actions.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Radiometrics VizAir?

Radiometrics VizAir is an administrative system used to monitor weather conditions and support flight safety operations. It processes essential data such as wind shear alerts and inversion depth to inform aviation decisions. Because it manages critical forecasting parameters that directly influence runway assignments and aircraft navigation, it acts as a foundational component for air traffic safety and operational situational awareness.

What does CVE-2025-61945 mean for the system?

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306). In simple terms, it means the administrative dashboard lacks a security gatekeeper. Because the system fails to verify the identity of someone trying to connect, any remote user can bypass the login process entirely and gain full administrative control over the weather data and alert configurations without providing credentials.

How does an attacker trigger this vulnerability?

An attacker triggers this flaw by navigating to the VizAir administrative panel over a network connection. No special preconditions, such as existing user accounts, stolen passwords, or social engineering, are required to initiate the connection. The vulnerability does not require interaction from an authorized user; it is exposed simply by the system's failure to enforce authentication for its administrative interface.

Is my VizAir system at risk?

According to Halo Surface Signal, risk depends on how your network is configured. While industrial systems are often meant to be private, VizAir administrative panels are frequently accessed via internal gateways or remote management services. If your instance is reachable over a network—whether directly from the internet or via internal segments that allow broad access—it is highly susceptible to this unauthenticated administrative takeover.

What should I do first to secure my deployment?

Your first step is to perform an internal audit to locate all deployed VizAir instances across your organization. Once you have identified these systems, assess their network reachability to determine which are exposed to broad or external access. Simultaneously, identify the specific business owners responsible for these assets so you can coordinate with operations teams to prioritize risk mitigation and formalize a remediation plan.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.