Introduction
Unauthorized changes to airport weather alerts can directly endanger aircraft and disrupt flight operations. The recent authentication bypass in Radiometrics VizAir, tracked as CVE-2025-61945, is a critical gap in aviation weather safety infrastructure. Remote attackers can manipulate flight-critical parameters without any credentials.
About Radiometrics VizAir: Radiometrics Corporation is a niche provider of atmospheric remote sensing and weather decision support systems. Airports deploy VizAir for real-time wind shear detection and weather monitoring. Radiometrics is not a household name, but airports in several regions depend on its products for safety and operational continuity.
Technical Information
CVE-2025-61945 is the direct result of missing authentication controls on the VizAir administrative panel. The admin interface is exposed over the network and asks for no credential or token of any kind. This is a classic instance of CWE-306: Missing Authentication for Critical Function (CWE-306).
Any remote user with network connectivity to the VizAir system can access the admin panel and modify:
- Wind shear alert thresholds
- Inversion depth values
- CAPE (Convective Available Potential Energy) values
These parameters are essential for accurate weather forecasting and safe runway assignments. An attacker who changes them can disable vital alerts, mislead air traffic control, and create hazardous conditions for aircraft. The vulnerability is trivial to exploit. It needs no special privileges, no user interaction, and no complex setup. The available sources include no vulnerable code snippets or exploit scripts. The flaw sits in the network-exposed admin interface, and no further technical details or configuration specifics were disclosed.
Affected Systems and Versions
- Product: Radiometrics VizAir weather decision support system
- Affected component: Network-exposed administrative panel
- No specific software version numbers or version ranges were disclosed in public advisories or references
- All configurations with an accessible admin panel lacking authentication are considered vulnerable
Vendor Security History
The provided sources show no prior public record of similar authentication bypass vulnerabilities in Radiometrics products. A flaw like this in a safety-critical product points to a need for stronger secure development practices and security review. The referenced materials contain no information on Radiometrics' patch response time or security maturity.
