← All advisories

High severity7.5NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026

CVE-2025-64092

CVE-2025-64092

Description

This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.

Affected products

4

Zenitel/Icx500 Firmware
cpe:2.3:o:zenitel:icx500_firmware:*:*:*:*:*:*:*:*
Range: <1.4.3.3
Zenitel/Icx510 Firmware
cpe:2.3:o:zenitel:icx510_firmware:*:*:*:*:*:*:*:*
Range: <1.4.3.3
Zenitel/Zenitel Security Advisoryllm-create
Zenitel/Icx510v5
Range: <1.4.3.3

Patches

Vulnerability mechanics

References

1

www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.