CVEvulnerability
CVE-2025-59815
8.4 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-09-25
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-77
Description
This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.
Related
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness
References
- https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System wiki.zenitel.com
- https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes wiki.zenitel.com