CVE-2025-64092
7.5 highEPSS 0.4%
High (7.5) in zenitel. EPSS 0.4% chance of exploitation in the next 30 days.
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zenitel:icx500_firmware
- zenitel:icx510_firmware
References
Check your stackJSON