CVE-2025-41365mediumCWE-94

CVE-2025-41365: falha de média gravidade em ZIV IDF and ZLF

Code injection vulnerability in IDF and ZLF

Publicada em

Seguir esta CVE+ Monitorar IDF and ZLF

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.4%
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed only with permissions higher than the view permission.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Produtos afetados
ZIV · IDF and ZLF
CVEs relacionadas — ZIV IDF and ZLF

No mesmo produto, das mais perigosas para as menos.

CVE-2025-41360HIGHUncontrolled resource consumption vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41362MEDIUMCode injection vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41367MEDIUMStored Cross-Site Scripting (XSS) vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41364MEDIUMStored Cross-Site Scripting (XSS) vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41366MEDIUMCORS vulnerability in IDF and ZLFEPSS 0.4%CVE-2025-41363MEDIUMCORS vulnerability in IDF and ZLFEPSS 0.3%