ZZenitel

Products

Exploited and recent CVEs

• CVE-2025-59819 Medium 6.5 Authenticated Arbitrary File Read via filepath parameter 0.4%
• CVE-2025-59818 Critical 10.0 Authenticated Remote Code Execution via the file name of an uploaded file 0.6%
• CVE-2025-64093 Critical 10.0 Unauthenticated Remote Code Execution via the device hostname 0.8%
• CVE-2025-64093 Critical 10.0 Unauthenticated Remote Code Execution via the device hostname 0.8%
• CVE-2025-64092 High 7.5 Unauthenticated SQL injection via GET request parameters 0.4%
• CVE-2025-64092 High 7.5 Unauthenticated SQL injection via GET request parameters 0.4%
• CVE-2025-64091 High 8.6 Authenticated Remote Code Execution in the NTP-configuration 0.4%
• CVE-2025-64090 Critical 10.0 Authenticated Remote Code Execution in device hostname 0.4%
• CVE-2025-64130 Critical 9.8 Zenitel TCIV-3+ Cross-site Scripting 1.0%
• CVE-2025-64129 High 7.6 Zenitel TCIV-3+ Out-of-bounds Write 0.5%
• CVE-2025-64128 Critical 10.0 Zenitel TCIV-3+ OS Command Injection 2.3%
• CVE-2025-64127 Critical 10.0 Zenitel TCIV-3+ OS Command Injection 2.3%
• CVE-2025-64126 Critical 10.0 Zenitel TCIV-3+ OS Command Injection 2.3%
• CVE-2025-59817 High 8.4 Authenticated Remote Code Execution in zForm_auto_config 0.2%
• CVE-2025-59816 High 7.3 Authenticated Union based SQL-injection in the search input field 0.2%
• CVE-2025-59816 High 7.3 Authenticated Union based SQL-injection in the search input field 0.2%
• CVE-2025-59815 High 8.4 Authenticated Remote Code Execution in the Billing Administration portal 0.3%
• CVE-2025-59815 High 8.4 Authenticated Remote Code Execution in the Billing Administration portal 0.3%
• CVE-2025-59814 High 8.8 Unauthenticated SQL-injection in password field 0.3%
• CVE-2025-59814 High 8.8 Unauthenticated SQL-injection in password field 0.3%