PT-2025-53406 · Tozed · Tozed Zlt M30S

S33K3R · Published 2025-12-25 · Updated 2026-01-20 · CVE-2025-15083

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TOZED ZLT M30s versions up to 1.47

Description A flaw exists in TOZED ZLT M30s up to version 1.47 related to the UART Interface component. Manipulation of an unknown function within this component can lead to improper access control to the on-chip debug and test interface. The physical device is targetable for this attack, which is described as highly complex and difficult to exploit. The exploit has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations Versions up to 1.47 should be updated when a fix becomes available. As a temporary workaround, consider disabling the UART Interface component to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-1191

Related Identifiers

CVE-2025-15083

Affected Products

Tozed Zlt M30S

References · 10

• 🔥 https://hacklab.eu.org/blogs/zlt_m30s_debug_interface · Exploit
• https://osv.dev/vulnerability/CVE-2025-15083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15083 · Security Note
• https://vuldb.com/?ctiid.338411 · Note
• https://vuldb.com/?id.338411 · Note
• https://t.me/cveNotify/149326 · Telegram Post
• https://t.me/CVEtracker/40665 · Telegram Post
• https://vuldb.com/?submit.707974 · Note
• https://twitter.com/CVEnew/status/2004294845930655858 · Twitter Post
• https://t.me/cveNotify/146830 · Telegram Post