CVE-2025-64090

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

Score

CVSS 3.1 10.0 Critical

Status

Analyzed - cert@ncsc.nl

Published

2026-01-09

Last modified

2026-01-09

Weaknesses

CWE-77

Affected products

• Tcis-3 (Zenitel)
• Tcis-3 Firmware (Zenitel)

References

• https://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf