Description
An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets.
Published: 2026-08-26
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Assess Impact
AI Analysis

Impact

An attacker who can physically approach the affected equipment can trigger a denial of service by sending forged SYN packets to the Vanderbilt Industries Acre Security SPC5300.000 Main Board v.3.14.1. The flaw allows the system to become unavailable, blocking legitimate traffic. This network‑level denial of service is associated with control‑flow and resource logic weaknesses (CWE-400, CWE-830).

Affected Systems

The flaw resides in the Acre Security SPC5300.000 Main Board version 3.14.1 manufactured by Vanderbilt Industries. No other affected products or versions are listed.

Risk and Exploitability

The CVSS score is 7.5, and the EPSS score is less than 1%, indicating a low probability of exploitation but the vulnerability is still considered a severe risk with potential for service disruption. The vulnerability is not listed in the CISA KEV catalog. Because the issue requires the attacker to be physically close to the board, the likely attack vector is local or secure network contexts. If an attacker can reach the board, they could rapidly exhaust resources, causing a denial of service, though publicly known exploits are not yet reported, implying a moderate‑to‑high risk pending discovery.

Generated by OpenCVE AI on August 28, 2026 at 18:00 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply any firmware or software update for the Acre Security SPC5300.000 Main Board that addresses the SYN packet handling issue.
  • Configure device or network firewalls to reject unsolicited SYN requests from unknown sources or to limit SYN rate (rate‑limit).
  • Restrict physical access to the board and use network segmentation to isolate it from untrusted networks.

Generated by OpenCVE AI on August 28, 2026 at 18:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 28 Aug 2026 18:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Spoofed SYN Packets on Acre Security Main Board

Fri, 28 Aug 2026 07:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via Spoofed SYN Packets in Acre Security SPC5300 Main Board
Weaknesses CWE-770

Thu, 27 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-830
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 26 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via Spoofed SYN Packets in Acre Security SPC5300 Main Board
Weaknesses CWE-770

Wed, 26 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets.
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-27T17:56:36.519Z

Reserved: 2025-09-26T00:00:00.000Z

Link: CVE-2025-61478

cve-icon Vulnrichment

Updated: 2026-08-27T17:56:29.735Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-26T21:16:37.703

Modified: 2026-09-09T16:03:22.897

Link: CVE-2025-61478

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T18:00:15Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-830

    Inclusion of Web Functionality from an Untrusted Source