CVE-2025-59815

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-59815", "assignerOrgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "state": "PUBLISHED", "assignerShortName": "NCSC-NL", "dateReserved": "2025-09-22T10:23:28.574Z", "datePublished": "2025-09-25T19:29:50.228Z", "dateUpdated": "2025-09-29T17:15:41.293Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "shortName": "NCSC-NL", "dateUpdated": "2025-09-26T05:46:48.773Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "CWE"}]}], "title": "Authenticated Remote Code Execution in the Billing Administration portal", "affected": [{"vendor": "Zenitel", "product": "ICX500", "versions": [{"version": "<1.4.3.3", "status": "affected", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Zenitel", "product": "ICX510", "versions": [{"version": "<1.4.3.3", "status": "affected", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device\u2019s availability, confidentiality, and integrity."}], "references": [{"url": "https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes", "name": "Zenitel", "tags": ["release-notes"]}, {"url": "https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System", "name": "Zenitel", "tags": ["patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "exploitCodeMaturity": "NOT_DEFINED", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "temporalScore": 8.4, "temporalSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", "modifiedAttackVector": "ADJACENT_NETWORK", "modifiedAttackComplexity": "LOW", "modifiedPrivilegesRequired": "HIGH", "modifiedUserInteraction": "NONE", "modifiedScope": "CHANGED", "modifiedConfidentialityImpact": "HIGH", "modifiedIntegrityImpact": "HIGH", "modifiedAvailabilityImpact": "HIGH", "environmentalScore": 8.5, "environmentalSeverity": "HIGH"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-29T17:14:00.473701Z", "id": "CVE-2025-59815", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-29T17:15:41.293Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-59815", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-29T17:14:00.473701Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-29T17:15:35.905Z"}}], "cna": {"title": "Authenticated Remote Code Execution in the Billing Administration portal", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "modifiedScope": "CHANGED", "temporalScore": 8.4, "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "temporalSeverity": "HIGH", "availabilityImpact": "HIGH", "environmentalScore": 8.5, "privilegesRequired": "HIGH", "exploitCodeMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "ADJACENT_NETWORK", "confidentialityImpact": "HIGH", "environmentalSeverity": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedIntegrityImpact": "HIGH", "modifiedUserInteraction": "NONE", "modifiedAttackComplexity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAvailabilityImpact": "HIGH", "modifiedPrivilegesRequired": "HIGH", "modifiedConfidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Zenitel", "product": "ICX500", "versions": [{"status": "affected", "version": "<1.4.3.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Zenitel", "product": "ICX510", "versions": [{"status": "affected", "version": "<1.4.3.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes", "name": "Zenitel", "tags": ["release-notes"]}, {"url": "https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System", "name": "Zenitel", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device\u2019s availability, confidentiality, and integrity."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "shortName": "NCSC-NL", "dateUpdated": "2025-09-26T05:46:48.773Z"}}}, "cveMetadata": {"cveId": "CVE-2025-59815", "state": "PUBLISHED", "dateUpdated": "2025-09-29T17:15:41.293Z", "dateReserved": "2025-09-22T10:23:28.574Z", "assignerOrgId": "cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39", "datePublished": "2025-09-25T19:29:50.228Z", "assignerShortName": "NCSC-NL"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "ICX500", "vendor": "Zenitel", "versions": [{"status": "affected", "version": "<1.4.3.3", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "ICX510", "vendor": "Zenitel", "versions": [{"status": "affected", "version": "<1.4.3.3", "versionType": "custom"}]}], "source": "cert@ncsc.nl"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device\u2019s availability, confidentiality, and integrity."}, {"lang": "es", "value": "Esta vulnerabilidad permite a actores maliciosos ejecutar comandos arbitrarios en el sistema subyacente del Gateway Zenitel ICX500 e ICX510, otorgando acceso de shell. La explotaci\u00f3n puede comprometer la disponibilidad, confidencialidad e integridad del dispositivo."}], "id": "CVE-2025-59815", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 6.0, "source": "cert@ncsc.nl", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59815", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-09-29T17:14:00.473701Z", "version": "2.0.3"}}]}, "published": "2025-09-25T20:15:35.510", "references": [{"source": "cert@ncsc.nl", "url": "https://wiki.zenitel.com/wiki/Downloads#ICX-AlphaCom_System"}, {"source": "cert@ncsc.nl", "url": "https://wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes"}], "sourceIdentifier": "cert@ncsc.nl", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "cert@ncsc.nl", "type": "Secondary"}]}

{}

{"created": "2025-09-26T11:35:36.778096+00:00", "updated": "2025-09-26T11:35:36.778151+00:00", "vendors": ["zenitel", "zenitel$PRODUCT$icx500", "zenitel$PRODUCT$icx510"]}