CVE 10 CRITICAL

Unauthenticated Remote Code Execution via the device hostname_CVE-2025-64093

10 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.

AI Analysis

Remote Code Execution vulnerability in Zenitel ICX500 and ICX510 devices via the hostname

Basic Information

ID CVE-2025-64093
Source NCSC-NL
Published Jan 9, 2026 at 10:04

Affected Product

Vendor Zenitel
Product ICX500
Version <1.4.3.3
Affected Versions Zenitel ICX500 <1.4.3.3
Zenitel ICX510 <1.4.3.3

AI Assessment

AI Score 10 / 10
AI Severity Critical
Vendor Zenitel
Product ICX500, ICX510
Version <1.4.3.3

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.