PT-2026-1844 · Zenitel · Zenitel Icx500+1

CVE-2025-64093 · Publicado 2026-01-09 · Atualizado 2026-02-10

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zenitel ICX500 and ICX510

Description A remote code execution issue exists that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device. The issue allows for the execution of commands without requiring authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2025-64093

Produtos afetados

Zenitel Icx500

Zenitel Icx510

Referências · 9

• https://osv.dev/vulnerability/CVE-2025-64093 · Aviso do Fabricante
• https://t.me/cveNotify/151629 · Publicação no Telegram
• https://t.me/CVEtracker/41820 · Publicação no Telegram
• https://zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-64093 · Nota de Segurança
• https://twitter.com/vuldb/status/2009590501281001679 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2009659402018562201 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2009578254492147975 · Publicação no Twitter
• https://t.me/cveNotify/148274 · Publicação no Telegram