PT-2025-24096 · Zlf+1 · Zlf+1

Published 2025-06-05 · Updated 2025-06-06 · CVE-2025-41361

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions IDF versions 0.10.0-0C03-03 ZLF versions 0.10.0-0C03-04

Description The devices improperly handle TLS requests associated with PROCOME sockets. This can cause the device to reboot, resulting in a denial of service when TLS requests are sent to those PROCOME ports. To exploit this issue, PROCOME ports must be configured and active, with communications encryption active.

Recommendations For IDF version 0.10.0-0C03-03, consider disabling the PROCOME ports until a patch is available to prevent unauthorized reboot via TLS requests. For ZLF version 0.10.0-0C03-04, restrict access to the PROCOME ports to minimize the risk of exploitation. As a temporary workaround, consider disabling communications encryption for PROCOME ports until the issue is resolved.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2026-00063

CVE-2025-41361

Affected Products

Idf

Zlf

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-41361 · Security Note
• https://bdu.fstec.ru/vul/2026-00063 · Security Note
• https://t.me/latest_high_impact_cve/2569 · Telegram Post
• https://t.me/cvenotify/124896 · Telegram Post
• https://twitter.com/CVEnew/status/1930965194420719994 · Twitter Post
• https://twitter.com/CveFindCom/status/1930960348888129878 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zivs-idf-and-zlf-products · Note