Remote Control Vulnerability in Radiometrics VizAir Weather Monitoring System

CVE-2025-54863

What is CVE-2025-54863?

The Radiometrics VizAir system is vulnerable due to an exposure of its REST API key within a configuration file accessible to the public. This weakness allows attackers to gain unauthorized access to modify critical weather data and system settings. With this access, they could initiate automated attacks, impacting multiple systems. Threat actors may manipulate meteorological data that can lead to hazardous conditions at airports, affecting flight planning and operations. In addition, attackers could generate false alerts, potentially overwhelming the system and causing a denial-of-service scenario, thus disrupting essential airport operations.

References