PT-2026-1843 · Zenitel · Icx500+3
CVE-2025-64092
·
Publicado
2026-01-09
·
Atualizado
2026-01-09
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
(affected versions not specified)
Description
This issue enables unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database. The attack is performed via the
GET request parameters. The vulnerable API endpoint accepts SQL injection through its parameters, allowing direct database queries.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Icx500
Icx510
Icx500 Firmware
Icx510 Firmware