PT-2025-22656 · Unknown · Tozed Zlt W51

Mohamed Maatallah · Published 2025-05-23 · Updated 2025-05-28 · CVE-2025-5105

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TOZED ZLT W51 versions up to 1.4.2

Description A critical issue affects some unknown functionality of the component Service Port 7777, leading to improper clearing of heap memory before release. This can be exploited remotely. The exploit has been disclosed to the public. The vendor was contacted about this disclosure but did not respond.

Recommendations For TOZED ZLT W51 versions up to 1.4.2, as a temporary workaround, consider restricting access to Service Port 7777 until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-244

Related Identifiers

CVE-2025-5105

Affected Products

Tozed Zlt W51

References · 10

• 🔥 https://github.com/Zephkek/LeakyTozed#41-proof-of-concept · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5105 · Security Note
• https://github.com/Zephkek/LeakyTozed · Note
• https://twitter.com/cracbot/status/1927681300812747221 · Twitter Post
• https://vuldb.com/?ctiid.310082 · Note
• https://vuldb.com/?submit.568495 · Note
• https://t.me/latest_high_impact_cve/2446 · Telegram Post
• https://vuldb.com/?id.310082 · Note
• https://t.me/cvenotify/123427 · Telegram Post
• https://t.me/cvetracker/24531 · Telegram Post