VULNERABILITY INTELLIGENCE
CVE-2025-59814
CVSS score8.8 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-09-25
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.
Weakness classification
- cert@ncsc.nl: CWE-89