← All advisories

Unrated severityNVD Advisory· Published Jan 9, 2026· Updated Jan 9, 2026

Authenticated Remote Code Execution in device hostname

CVE-2025-64090

Description

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

Affected products

1

Zenitel/TCIV-3+cpe-rescue
Range: <9.2.3.3

Patches

Vulnerability mechanics

References

1

www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdfmitrevendor-advisory

News mentions

0

No linked articles in our index yet.