by Kastro
Paper/Archive/CVE-2025-64128

CVE-2025-64128

Zenitel TCIV-3+ — Zenitel TCIV-3+ OS Command Injection

EPSS 2%CVSS 10.0
critical.is priorityof 100
47
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 83.5.835 × 2016.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit attackers to append arbitrary data. This could allow an unauthenticated attacker to inject arbitrary commands.

Affected

ProductAffectedFixed inSource
TCIV-3+≤ 9.3.3.0–CNA

Scores by source

icscert (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
icscert (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29refcisa.gov/news-events/ics-advisories/icsa-25-329-03refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json