← All advisories

Critical severity10.0NVD Advisory· Published Jan 9, 2026· Updated Jun 17, 2026

CVE-2025-64093

CVE-2025-64093

Description

Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.

Affected products

4

Zenitel/Icx500 Firmware
cpe:2.3:o:zenitel:icx500_firmware:*:*:*:*:*:*:*:*
Range: <1.4.3.3
Zenitel/Icx510 Firmware
cpe:2.3:o:zenitel:icx510_firmware:*:*:*:*:*:*:*:*
Range: <1.4.3.3
Zenitel/Zenitel Security Advisoryllm-create
Zenitel/Icx510v5
Range: <1.4.3.3

Patches

Vulnerability mechanics

References

1

www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdfnvdVendor Advisory

News mentions

0

No linked articles in our index yet.