CVE-2025-59815

{"id": "CVE-2025-59815", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59815", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-29T17:14:00.473701Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cert@ncsc.nl", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.7}]}, "affected": [{"source": "cert@ncsc.nl", "affectedData": [{"vendor": "Zenitel", "product": "ICX500", "versions": [{"status": "affected", "version": "<1.4.3.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Zenitel", "product": "ICX510", "versions": [{"status": "affected", "version": "<1.4.3.3", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-09-25T20:15:35.510", "references": [{"url": "https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System", "source": "cert@ncsc.nl"}, {"url": "https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes", "source": "cert@ncsc.nl"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cert@ncsc.nl", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device\u2019s availability, confidentiality, and integrity."}, {"lang": "es", "value": "Esta vulnerabilidad permite a actores maliciosos ejecutar comandos arbitrarios en el sistema subyacente del Gateway Zenitel ICX500 e ICX510, otorgando acceso de shell. La explotaci\u00f3n puede comprometer la disponibilidad, confidencialidad e integridad del dispositivo."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "cert@ncsc.nl"}