Vulnerability · Published Aug 13, 2025 · Assigned by VulDB
CVE-2025-8762INSTAR 2K+/4K UART improper physical access control
Medium 6.8
In plain English
A medium-severity improper access control in 2K+ from INSTAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.2%top 89.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
Weakness: CWE-1263, CWE-284 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-319865 | INSTAR 2K+/4K UART improper physical access control vdb-entry
- VDB-319865 | CTI Indicators (IOB, IOC) signature, permissions-required
- https://modzero.com/static/MZ-25-03_modzero_INSTAR.pdf exploit