PT-2025-45576 · Unknown · Tozed Zlt T10Plus+1

Cucumbersalad · Published 2025-11-09 · Updated 2025-12-09 · CVE-2025-12917

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions TOZED ZLT T10 T10PLUS version 3.04.15

Description A flaw exists in TOZED ZLT T10 T10PLUS. Manipulation of an unknown function within the /reqproc/proc post file of the Reboot Handler component can lead to a denial of service. Access to the local network is required to exploit this issue. The exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations TOZED ZLT T10 T10PLUS version 3.04.15: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-12917

Affected Products

Tozed Zlt T10

Tozed Zlt T10Plus

References · 13

• 🔥 https://youtu.be/3Me3wlH5cfU · Exploit
• 🔥 https://vuldb.com/?submit.679507 · Exploit
• 🔥 https://youtube.com/watch?v=3Me3wlH5cfU · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12917 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12917 · Vendor Advisory
• https://t.me/cveNotify/142222 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1987440755271520327 · Twitter Post
• https://twitter.com/akaclandestine/status/1988153253339488605 · Twitter Post
• https://t.me/CVEtracker/36874 · Telegram Post
• https://vuldb.com/?id.331635 · Note
• https://vuldb.com/?ctiid.331635 · Note
• https://t.me/cveNotify/145232 · Telegram Post
• https://twitter.com/CVEnew/status/1987427499387580919 · Twitter Post