Vulnerabilidades en zenitel
15 resultadosAnálisis Vexday
Zenitel apresenta presença mínima de vulnerabilidades conhecidas com apenas 1 CVE registrado, sem incidentes de exploração ativa ou classificações críticas documentadas. A vulnerabilidade identificada refere-se a traversal de diretórios (CWE-22), risco legítimo porém não recente, indicando perfil de risco baixo para este fornecedor.
CVE-2025-64128CRITICALZenitel TCIV-3+ OS Command InjectionEPSS 2.4%CVE-2025-64127CRITICALZenitel TCIV-3+ OS Command InjectionEPSS 2.4%CVE-2025-64126CRITICALZenitel TCIV-3+ OS Command InjectionEPSS 2.4%CVE-2025-64130CRITICALZenitel TCIV-3+ Cross-site ScriptingEPSS 0.9%CVE-2025-64093CRITICALUnauthenticated Remote Code Execution via the device hostnameEPSS 0.8%CVE-2025-59818CRITICALAuthenticated Remote Code Execution via the file name of an uploaded fileEPSS 0.5%CVE-2025-64129HIGHZenitel TCIV-3+ Out-of-bounds WriteEPSS 0.4%CVE-2025-64092HIGHUnauthenticated SQL injection via GET request parametersEPSS 0.4%CVE-2025-64090CRITICALAuthenticated Remote Code Execution in device hostnameEPSS 0.4%CVE-2025-59819MEDIUMAuthenticated Arbitrary File Read via filepath parameterEPSS 0.4%CVE-2025-64091HIGHAuthenticated Remote Code Execution in the NTP-configurationEPSS 0.4%CVE-2025-59814HIGHUnauthenticated SQL-injection in password fieldEPSS 0.3%CVE-2025-59815HIGHAuthenticated Remote Code Execution in the Billing Administration portalEPSS 0.3%CVE-2025-59817HIGHAuthenticated Remote Code Execution in zForm_auto_configEPSS 0.2%CVE-2025-59816HIGHAuthenticated Union based SQL-injection in the search input fieldEPSS 0.2%