CVE-2025-64093

Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.

Score

CVSS 3.1 10.0 Critical

Status

Analyzed - cert@ncsc.nl

Published

2026-01-09

Last modified

2026-01-09

Weaknesses

CWE-77

Affected products

• Icx500 (Zenitel)
• Icx500 Firmware (Zenitel)
• Icx510 (Zenitel)
• Icx510 Firmware (Zenitel)

References

• https://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf