by Kastro
Paper/Archive/CVE-2025-64127

CVE-2025-64127

Zenitel TCIV-3+ — Zenitel TCIV-3+ OS Command Injection

EPSS 2%CVSS 10.0
critical.is priorityof 100
47
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 83.5.835 × 2016.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely.

Affected

ProductAffectedFixed inSource
TCIV-3+≤ 9.3.3.0–CNA

Scores by source

icscert (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
icscert (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29refcisa.gov/news-events/ics-advisories/icsa-25-329-03refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json