PT-2025-45576 · Unknown · Tozed Zlt T10Plus+1

Cucumbersalad · Publicado 2025-11-09 · Atualizado 2025-12-09 · CVE-2025-12917

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions TOZED ZLT T10 T10PLUS version 3.04.15

Description A flaw exists in TOZED ZLT T10 T10PLUS. Manipulation of an unknown function within the /reqproc/proc post file of the Reboot Handler component can lead to a denial of service. Access to the local network is required to exploit this issue. The exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations TOZED ZLT T10 T10PLUS version 3.04.15: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

CVE-2025-12917

Produtos afetados

Tozed Zlt T10

Tozed Zlt T10Plus

Referências · 13

• 🔥 https://youtu.be/3Me3wlH5cfU · Exploit
• 🔥 https://vuldb.com/?submit.679507 · Exploit
• 🔥 https://youtube.com/watch?v=3Me3wlH5cfU · Exploit
• https://t.me/cveNotify/142222 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1987440755271520327 · Publicação no Twitter
• https://twitter.com/akaclandestine/status/1988153253339488605 · Publicação no Twitter
• https://t.me/CVEtracker/36874 · Publicação no Telegram
• https://vuldb.com/?id.331635 · Nota
• https://vuldb.com/?ctiid.331635 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-12917 · Nota de Segurança
• https://t.me/cveNotify/145232 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-12917 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1987427499387580919 · Publicação no Twitter