Vulnerability · Published Sep 25, 2025 · Assigned by NCSC-NL
CVE-2025-59817Authenticated Remote Code Execution in zForm_auto_config
High 8.4
In plain English
A high-severity command injection in TCIS-3+ from Zenitel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.2%top 83.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity.
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- Zenitel patch