CVE-2025-41364: fallo de gravedad media en ZIV IDF and ZLF
Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.1epss 0.4%
Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Productos afectados
ZIV · IDF and ZLFCVEs relacionadas — ZIV IDF and ZLF
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-41360HIGHUncontrolled resource consumption vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41362MEDIUMCode injection vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41365MEDIUMCode injection vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41367MEDIUMStored Cross-Site Scripting (XSS) vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41366MEDIUMCORS vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41363MEDIUMCORS vulnerability in IDF and ZLFEPSS 0.3%