Radiometer Medical Aps ABL90 FLEX Configuration access control

Summaryinfo

A vulnerability marked as critical has been reported in Radiometer Medical Aps ABL90 FLEX, ABL90 FLEX PLUS, AQT90 FLEX, ABL800 BASIC and ABL800 FLEX. This vulnerability affects unknown code of the component Configuration Handler. The manipulation leads to access control. This vulnerability is uniquely identified as CVE-2025-14095. It is possible to launch the attack on the physical device. No exploit exists.

Detailsinfo

A vulnerability was found in Radiometer Medical Aps ABL90 FLEX, ABL90 FLEX PLUS, AQT90 FLEX, ABL800 BASIC and ABL800 FLEX. It has been rated as critical. This issue affects an unknown code of the component Configuration Handler. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A "Privilege boundary violation" vulnerability is identified affecting multiple Radiometer Products. Exploitation of this vulnerability gives a user with physical access to the analyzer, the possibility to gain unauthorized access to functionalities outside the restricted environment. The vulnerability is due to weakness in the design of access control implementation in application software.  Other related CVE's are CVE-2025-14096 & CVE-2025-14097. Affected customers have been informed about this vulnerability. This CVE is being published to provide transparency. Required configuration for Exposure: Physical access to the analyzer is needed. Temporary work Around: Only authorized people can physically access the analyzer. Permanent solution: Local Radiometer representatives will contact all affected customers to discuss a permanent solution. Exploit Status: Researchers have provided working proof-of-concept. Radiometer is not aware of any publicly available exploit at the time of publication.                                                                                                                                                                                        Note: CVSS score 6.8 when underlying OS is Windows 7 or Windows XP Operating systems and CVSS score 5.7 when underlying OS is Windows 8 or Windows 10 operating systems.

The advisory is shared at radiometer.com. The identification of this vulnerability is CVE-2025-14095 since 12/05/2025. The exploitation is known to be easy. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-203887). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Medical Device Software

Vendor

• Radiometer Medical Aps

Name

• ABL90 FLEX
• ABL90 FLEX PLUS
• ABL800 BASIC
• ABL800 FLEX
• AQT90 FLEX

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion