VULNERABILITY INTELLIGENCE

CVE-2025-59815

CVSS score8.4 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-09-25
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.

Weakness classification

  • cert@ncsc.nl: CWE-77

Primary references