VULNERABILITY INTELLIGENCE

CVE-2025-41361

EPSS probability0.25%
CISA KEVNot currently listed
Published2025-06-06
Last modified2026-06-17

Description

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.

Weakness classification

  • cve-coordination@incibe.es: CWE-400

Primary references