← All advisories

Critical severity10.0NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026

CVE-2025-64090

CVE-2025-64090

Description

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

Affected products

3

Zenitel/Tcis 3 Firmware
cpe:2.3:o:zenitel:tcis-3_firmware:*:*:*:*:*:*:*:*
Range: <9.2.3.3
Zenitel/A100K12333llm-create
Zenitel/TCIV-3+cpe-rescue
Range: <9.2.3.3

Patches

Vulnerability mechanics

References

1

www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.