Vulnerabilidades do Zenitel TCIS-3+
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Zenitel TCIS-3+: 4 registro(s), com versões afetadas e correções.
CVE-2025-59818
Crítica · 9.8
CWE-77 04/02/2026
Injeção de Comandos no Firmware do Zenitel Tcis-3 via Nome de Arquivo Enviado
Esta vulnerabilidade permite que atacantes autenticados executem comandos arbitrários no sistema subjacente usando o nome de arquivo de um arquivo enviado.
CVE-2025-64091
Alta · 8.8
CWE-78 09/01/2026
Authenticated Remote Code Execution in the NTP-configuration
This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.
CVE-2025-64090
Alta · 8.8
CWE-77 09/01/2026
Authenticated Remote Code Execution in device hostname
This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
CVE-2025-59817
Alta · 8.4
CWE-77 25/09/2025
Authenticated Remote Code Execution in zForm_auto_config
This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity.