← All advisories

Unrated severityNVD Advisory· Published Jan 9, 2026· Updated Jan 9, 2026

Unauthenticated SQL injection via GET request parameters

CVE-2025-64092

Description

This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.

Affected products

1

Zenitel/Icx510v5
Range: <1.4.3.3

Patches

Vulnerability mechanics

References

1

www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdfmitrevendor-advisory

News mentions

0

No linked articles in our index yet.