10
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.
AI Analysis
Remote Code Execution vulnerability in Zenitel ICX500 and ICX510 devices via the hostname
Basic Information
ID
CVE-2025-64093
Source
NCSC-NL
Published
Jan 9, 2026 at 10:04
Affected Product
Vendor
Zenitel
Product
ICX500
Version
<1.4.3.3
Affected Versions
Zenitel ICX500 <1.4.3.3
Zenitel ICX510 <1.4.3.3
Zenitel ICX510 <1.4.3.3
AI Assessment
AI Score
10 / 10
AI Severity
Critical
Vendor
Zenitel
Product
ICX500, ICX510
Version
<1.4.3.3