Vulnerability in Instar 2k+
CVE-2025-8761
A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the component Backend IPC Server. The manipulation leads to denial of service. The attack can be initiated remotely. The expl…
EPSS: 0.001 (25.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:W/RC:R.
Affected products
- Instar 2k+ — versions 3.11.1 Build 1124
- Instar 4k — versions 3.11.1 Build 1124
Weakness classification (CWE)
References
- VDB-319864 | INSTAR 2K+/4K Backend IPC Server denial of service (vdb-entry)
- VDB-319864 | CTI Indicators (IOB, IOC, TTP) (signature, permissions-required)
- modzero.com/static/MZ-25-03_modzero_INSTAR.pdf (exploit)
Frequently asked questions
- What is CVE-2025-8761?
- CVE-2025-8761 is a high-severity vulnerability in Instar 2k+, classified under Improper Resource Shutdown or Release. CVSS score: 7.5/10. Published 2025-08-13.
- How severe is CVE-2025-8761?
- High severity. CVSS v3 base score is 7.5 out of 10.